Got to be a scam Bill. [Linked Image]

I have a PayPal account which I use quite regularly for buying from the States, and they have my credit card number and expiry date on file. If I only need to use my password on a secure link to make a payment, why on earth would they need to ask for the card details again just to "verify" your status?

And there's no reason whatsoever why PayPal or anyone else would need to know my ATM PIN.

Have you had a look at the message headers to see where it might have come from?