Paypal users targeted by convincing email scam - here's what to look out for