You need to log on to Paypal (if it hasn't already been hacked and you're still able to) and change your password immediately. If you can't log on because the hacker has already changed your password, ring them instead, and don't waste any time about it.

For future reference, you should NEVER click on embedded links in emails, no matter how secure you think they may be.