I don't buy enough to ever be caught out that way.

And, as per Paypal's advice, and commonsense, I never click on payment email links.

Guess the phishers will find easier phish. And there was a study a few years ago that found scamees were self-selecting, but I won't go there.