I don't think that PayPal will ever ask you to download an app or provide your password. When you receive an email, text or call asking for something, make sure you check with the legitimate website, in this case PayPal. Phishing attempts and social engineering will always make it appear that a threat actor is legitimate. Easy ways to tell if something is fake are typos, weird email addresses, asking for your account information, or downloading files.
... View more