Whta really bothers me is that when I use the buy button from the email and then use the paypal option I'm taken to the PayPal login screen (so far so good).
Then I'm asked to verify that I am the holder of the (paypal) account by supplying my bank account number.
I stop at that point.
I check the URL. Yes, it's Https : //
www.paypal.com <etc......>
That all seem legit but I've never been asked (by paypal) to input my account number after I've logged in.