phishing? anyone seen this?

[pilger]

I received this on an email account that I have never used with paypal.  Sounds like a scam - what do you think?

----------------------------------------------------------------------------------------------------------------------------------------------------------------------

Security Update - Response Required

Monday, May 31, 2010 9:01 AM

From:

"PayPal"

To:

undisclosed-recipients

Message contains attachments

1 File (3KB

On Monday, May 31, 2010, your credit card has been removed from your PayPal account.

You are receiving this email notification because this email address is listed as the administrative contact email for your PayPal account. If you belive this is an error, please fill in all the details that are required to complete this verification process.

To do this we have attached a form to this email.
Please download the form and follow the instructions on your screen.

Please understand that this is a security measure intended to help protect you and your account. We apologize for any inconvenience.
If you choose to ignore our request, you leave us no choice but to temporary suspend your account.

Sincerely, PayPal Account Review Department. Please do not reply to this email. This mailbox is not monitored and you will not receive a response.

Sincerely,
PayPal

----------------------------------------------------------------

PayPal Email ID PP3305111

------------------------------------------------------------------------------------------------------------------------------------------------------------------

have a nice day,

p

[surplusdealdude]

 It's a phishing scam designed to steal your password and perhaps to download a keylogger spyware onto your computer.

NEVER open one of the attachments.

NEVER sign in to your Paypal account from an email link.


And, to make your Paypal account bullet-proof, visit the security center in your Paypal account and buy one of their security keys for $5.  It puts a separate, randomly-generated numerical password on your account that changes every 30 seconds and cannot be hijacked, even if the scammer has your password.