Sending this message so people are aware of it. Earlier today, my roomie got an e-mail from Paypal saying that he purchased several hundred dollars worth of t-shirts. Seconds later, he got the purchase confirmation e-mail. Obviously, he knew he didn't make any such purchase, so, in looking at the e-mail (no links in it were clicked) , the address was clearly NOT Paypal. As such he reported it to Paypal's spoof department.

Just prior to this journal, I received the same two e-mails. If they show up in your e-mail inbox, just report them to spoof[at]paypal.com