I got an e-mail that looked okay, saying my paypal account (which is brand new) was being closed due to unauthorized use, and I should go to their website and provide them with particulars.

Reply e-mail address looked okay, service@paypal.com, but I thought the overall tone sounded like a phishing trip, so I forwarded the e-mail to spoof@paypal.com, which is where their regular website tells you to send suspicious e-mails.

In reply Paypal said it is a phishing e-mail, and " our security team is working to disable it."

Sounds like a bomb. Anyhow, watch out for it.