A new PayPal phishing attack has been confirmed with a critical twist: it’s phish-free. Here’s what you need to know.

Please confirm: If a payment is received via a new e-mail address, PayPal asks whether this belongs to the account.