The point of the sham is to get you to enter your PayPal account number. Then they can sign onto your account and empty it or do just about anything else they want. It is NOT PayPal sending you the emails. Just because it reads "PayPal" somewhere in the email address does not mean it's actually from PayPal. The biggest giveaway is the email address itself. All mail REALLY from PayPal will be from
xxxxx@paypal.com and PayPal will never send you an email asking you to log in via a link.