Someone got into my account once and took everything in my checking account that was tied to my PayPal. I notified them and they put all the money back in my checking within a day. PayPal acted very strange about the whole situation, I would almost say they were overly accommodating, which led me to believe they were probably "social" hacked and that's how my account info was obtained. I don't even open any emails that appear to be from PayPal. They have my phone number, if it's a real emergency they can call.
NEVER trust any email that comes from paypal or other payment processors that say you account has a problem or something! Delete these emails immediately.
Agreed, Never click on the link in your email. Open it in a new window and watch to see if there is a redirection. My mother clicked on link for paypal in her email. Ends up a phishing site. Hacked her account and bought several cell phones with her account. Luckily she was able to get the money sent back. And things worked out somethingly from there on. She was kinda mad at me for not telling her not to click on links to financial istitutions via email. But oh wll, hard lesson learned.