Having just sent something through to Mudcat I have received a similar e mail to the one above. Had it been sent to the e mail address I use for business correspondence I might have been fooled as all it requested was that I confirm recent transaction by entering my password. I didn't but did click on the link to the website it provided to see if it really was paypal. Again had I not been already warned of such scams I may have only given a cursory glance to the URL and thought it was correct but in fact it was https// instead of the usual http// almost everything else about the page looked genuine right down to the registered logo! The main difference was that where paypal have a clicky to a login page which opens in a new window (and presumably uses the encrypted security) this one had a space for e mail and password. They are frighteningly believable even have a little warning about not posting to fraudulent sites!!!