A good practice with any email that ask you to log in is to never click the links, but open a new window and type in the address yourself and log in there.
If you look at the actual address the link goes to, the scam always goes to something like paypal.gimmeurmoney.com, never the actual paypal.com, so easy to tell. Doesn't matter what the address say, what's important is the part immediately before .com (or other legit extensions). Though careful it's not paypal.com.fakeaddress.ng or something like that.
