Just by looking at the email address of the sender you will see it's not coming from Paypal. What you need to be more aware of are the ones with the convincing ones which are way too similar to the official email address as if you aren't used to opening up emails from your financial accounts you would barely see the difference. You should always ask yourself why did you have that refund if you haven't transacted with them in the first place or why you have won a prize when you aren't joining any contests. People are way to jolly when they see money coming in they forget to the fact that their is a big chance it's fake.
That's not always the case. There are ways you can spoof the sender email and make it look completely legit.
See:
https://lifehacker.com/how-spammers-spoof-your-email-address-and-how-to-prote-1579478914What you need to do is:
1. always manually go to the website and see what is happening for yourself, rather than clicking on the email link; or
2. copying everything on the link after the main domain, writing it yourself and pasting the remaining link; and
3. ALWAYS triple-check the URL.
Yes that's really the way on catching them because you cannot fake a real website's URL, if they can trick you with their email you must not be fooled by their fake website URL. That's the beauty of having domain names being unique. Aside from you being knowledgeable about the domain name you must also check for the other security features such as the padlock icon and security badges (like Norton and McAfee below their page) for the website for you know to that it's the real website you are visiting in.
