(If you get an email like these - mark it as a Phishing Scam, do not click on the attachment!)
Here's what PayPal says: "We also won't ask you to view an attachment or install a software update. Only a few of our emails to you - such as for password recovery or to confirm an email address - will ask that you click on hyperlink to complete an action. If you didn't request a password reset or add an email address, scrutinize the email further before proceeding.In fact, most phishing emails will present you with a situation that tries to provoke you into immediate action - and usually recommends that you click on a link in the same email to dispute a transaction or provide the requested information as soon as possible."