I've gotten 3 or 4 requests for Pay Pal info in the last year. I forward them to
spoof@paypal.com and in every instance they have gotten back to me and it was a phony. And Rocky's right, they looked legitimate.
Anytime you get a corespondence like that, don't even open it. Go to the pay pal website and log in and see if they have sent you anything there. They warn you that is the way they communicate with you, not by E-mail. Other than reciepts for payment.
I got 2 of the E-mails thanking me for recent purchases, but they thought they were suspicious and asking me for info. Both were hoaxes also. One was for a red dress of some kind. Have you ever seen the commercial where the people were identity theft victims. If you could see me in a red dress, I think you would agree this would be an excellent example!
Sorry it happened to you Rocky.