Spam emails are getting more and more real looking. For example, here’s a Paypal email I received below. Looks genuine! But, when I hover over the link, I see that it’s to some random/non-paypal domain. Sometimes it’s obvious, but sometimes it’s more like paypal-money.com or something like that. Check very closely! Even better, don’t ever click the links. Go to Paypal (or whoever’s) site directly instead.