It's been a real pita Geoff. I've been getting them for months and Paypal don't seem to be able/willing
to do anything about them.
The easiest way to tell the difference between a paypal email and a bogus one is Paypal will always address the content of the email spcifically to you, eg mine are always Paul Russell, whereas the fraud ones start with Dear Customer.
If anyone has fallen for one of these scumbag emails, log into your Paypal account (through the paypal home page) and change your login password details immediately, now, pronto!