Good tips. Another thing to point out is to never go to PayPal through a link in your email. Always go to the browser and manually type it in. I've received many in the past that very closely resembled a PayPal address, but not quite. Usually you can hover over the sender name and check it out. The ones I got were from PayPall...with 2 "l's".
Another thing people may not realize they have is a Trojan Horse virus called Keylogger or something similar. It records your keystrokes and sends them back to whoever infected your pc. Use an anti-virus and keep it updated! I know people who load it in their system and never update...not much point in that!