The phishing is: You get an email in your regular mail that says something like "verify your account info to update our records", or something like that. The address it comes from is a bit "off" like:
[email protected], or
[email protected]. Be sure to forward them directly to paypal!