So I accidentally bought an item from what appears to be a fraud website. Paid with paypal, they uploaded a tracking # for an item I bought/received weeks ago so they somehow had access to USPS tracking numbers for my address. I opened a dispute, and today I received an email saying I received a message from the seller. I logged into paypal but no message is there. The email from Paypal looks like a legit one. It says it is from service@paypal and all of the links direct to the https paypal websites. Any idea what's going on here? Is it possible to spoof an email from service@paypal and also have it say it is signed by paypal?
