Toob about 1 month ago
Read the article and this has sound advice for scams in general as well as the one in question
Summary: Yes, they found a way to email from official PayPal servers without hacking. If you get one, go to PayPal's website and get contact info from there, not what's provided in the email (1/2)
add a skeleton here at some point