There are a lot of fake PayPal emails at the moment.

The give away is in the site address, it's usually slightly different.

I add them all to my blocked list at the bottom of junk and add only the site address.

That way everything from that addy is blocked. ( @epaypal.com )