Here's another example of how far phishers and scammers will go to suck you in. The key here is the actual URL of the phishing site. For the uninitiated, that's the sequence of characters following the http:// that indicates the location of the site. You should get into the habit of always noting where your browser is heading, especially when you are asked - in an email, usually - to enter or change personal information.
Fake "confirm PayPal account" emails lead to phishing