I recently changed my primary accounts and I received a message like the one with the above heading in my older, spam drenched account. To be more accurate, I received 2 of them, generated within 15 minutes of one another. Each contained a different crazy string of letters after it in the subject and the was an attachment I was supposed to run, alleging that my account would expire in 5 days if I didn't run it so they could collect "additional personal information from me."

Now, I'm pretty sure I didn't receive this at my other addy and all signs point to it being a scam. It "appeared" to have come from the paypal domain, but I know that putting a false domain name in a header must be Hacker 101. I went to paypal to see if there were any signs of this, as a new policy or whatever, and saw none. I forwarded the e-mails to the address they provide on the website for if you think you've received a bogus paypal e-mail.

I'm 99.9 percent sure that I did the right thing and that I recall the user agreement for PP stating that they would never contact me via e-mail for this sort of thing, but can someone confirm and ease my mind?

BTW, I'm nowhere near my transfer limit, so it can't be that they need me to become "verified."

Thanks.