As Pomtzu said - make sure, first of all, that it really is PayPal contacting you. I get spam - some of it cleverly done - claiming to be from PayPal all the time. Check the headers to make sure of its origin.