I just got a really, really good spoof email "from" PayPal tonight. The address was right (service@paypal.com) but the email seemed a little off--mostly, the weird code in the header, and the way it kept saying "PayPal," even when a comma was not called for, and that it was telling me about some weird activity on my account that supposedly happened four months ago.
I've already sent it to the PayPal fraud people, but I want to call everyone's attention to PayPal's excellent
email security page. Several of the things they point out were true of this email: the email addressed me as "PayPal member"; it asked me to click on a link to re-verify my account. I looked at my other emails, and then sent this one in. But let me tell you, it looked really good.
Meanwhile, Medium was really creepy tonight.