I get those all the time for eBay and PayPal, but if it showed up in a browser with PayPal's actual URL, then you haven't updated your computer with the latest patches. That explot was fixed a few months ago. In the ones I get, it looks all official and has links to eBay's actual Terms of Service, searches, etc... but the link they tell you to click on actually points to some anonymous *.nl site in europe that also LOOKS like eBay, but isn't.