Personally, I would treble clear the cache and all cookies on whatever device you are using. There’s no guarantee that these scammers haven’t retrieved any information from your pc, tablet or phone already, if they are using some form of keystroke recognition, but, make their chances of getting any more information as slim as possible. It may be worth contacting Paypal too - I’m not saying that you have to get a reply from them before using Paypal in the morning, but, I would certainly forward the dodgy email to their fraud department - think it’s: <removed> spoof@paypal.com, should be easy enough to find via search on main site.
Another precaution that I take nowadays, is I have seperate email addresses for ebay, Paypal and facebook as a lot of information seems to pass between all of these companies and it never ceases to amaze me how apps can send me targeted adverts, even though I have never given them any preferences, so, basicalky they have received the information from another site. Always remember that (generally speaking) Paypal is connected to your bank account, so it’s better to be safe than sorry.
Best of luck.
