Yes, I've heard about this one -and PayPal are understandably a wee bit miffed about it.

Simple advice - never trust anyone who e-mails you to ask for credit card details, passwords, etc., unless you know in advance that it is required in connection with a genuine transaction.

People like PayPal only use 'Secure HTML' form scripts to request such information, and these scripts are designed so that another user of the same computer (if you are in a busy office, for example) cannot fraudulently reproduce the keystrokes used to enter them.

It is their policy never to discuss/divulge such information via e-mail.

Thanks for brining it to our attention, Gareth.