You know, I had received a letter from Pay Pal the day before stating that there was some irregular activity re:#/...... I looked up my account and there was nothing there at that time that even resembled that reference Number so I let it go.That was however, the first time I had seen the reference to spoof@PayPal (guess I missed it before). I had not read about the security key nor was one offered. I will ask and I know I have to only change my password. They got my bank info though so I am getting a new credit card.In the meantime I am in limbo.