I was going to try to summarize the tips but I really think this is something that people should take a moment to read.  I think I'm pretty internet-savvy and I almost fell for one of these fake-Paypal ("About your recent transaction") messages last year because it came minutes after I'd make a Paypal transaction.

I think most people catch on to fake emails coming from "TD Bank" if they don't have an account with that back but, even if they do, people should be suspicious of any email telling them to do things out of the blue.

PLEASE:  Read the full article on Emsisoft's blog