.
.
and was probably included to make the email appear authentic.
While it could be legit, he definitely shouldn't click on the link.
a phone call to PayPal will clear things up.
.
.