to phishing@paypal.com or spoof@paypal.com to report it to their security team.
to the sender or provide any personal/financial details.
any links, open attachments, or call any phone numbers provided in the message.
How do I spot a fake, fraudulent, or phishing PayPal email or website?