Watch for scam sites by looking at the domain (paypal.com is a domain), not just the design. Design can be mimicked. Addresses can’t. It is not paypal, if the address is paypol.com. If you are at all suspicious, don’t put in your password. If you do put in a correct password, a phishing site will often repeatedly say it is wrong. That way they can get all your passwords.
