I had an e-mail from "PayPal" a week or so ago confirming an order for a Taylormade golf club in the amount of $537.48. I panicked like crazy. I called PayPal (wasn't too easy to find the phone number, though), and they confirmed that there was no transaction on my account. I went to the credit union the next morning and cancelled the debit card attached to my PayPal account. (However, the teller COULD have told me there was a $5 fee for that.) I watch my bank account very closely as I am on unemployment.
If you get e-mails like that DO NOT CLICK ON THE LINKS in the e-mail. Go to the link by typing the URL in the menu bar. If you go through the e-mail, they (and we all know who THEY are) have your information and can hack your accounts.