True Paypal has been a target of phishing. The most important thing to look for is, when you type www.paypal.com, you should automatically be connected to https://www.paypal.com/. Check to see this appears in your address bar together with a lock symbol.

Always type in the address yourself and avoid going to Paypal via a link.

Needless to say ignore all emails with passwords, account update etc. notices from paypal. Do not open the attachments and or click on the link within.

Stay within these parameters and you will be (hopefully) safe.