Well , the key is that never login through links from email (some are asking you to update your account) and phone calls ( asking for private info etc).Not only for paypal , but for online banking , e-gold everything etc.