I got a clever PayPal phishing e-mail today:
You have added firstname.lastname@example.org as a new email address for your PayPal account.
If you did not authorize this change or if you need assistance with your account, please contact PayPal customer service at:
Thank you for using PayPal!
The PayPal Team
The e-mail address and URL were both linked to this URL:
Of course, I checked my PayPal account and no such address has been added.
That’s a lot more dangerous than the typical “please confirm your account details” phishing attempts I’ve seen and heard about in the past.