I got a phishing email today - looked very authentic - from PayPal.
When you get those, don’t click on a link in the email - to directly to the site by typing PayPal (or whatever site it is) in your browser and logging in that way. They claimed that I had an $899 charge that ‘someone was waiting for’. Which, of course, was not true.
They’re doing a pretty good job of making these emails look authentic.