Two pieces of advise on spoof emails:
(1) The real emails from eBay and PayPal will start off with your full name (first and last name), not just a generic Hello or Dear Customer, etc. I'd be suspicious even if it had your full name, but if you don't see your full name, you know it is a spoof for sure.
(2) If I click a link in an email, and a page pops up where I'm asked to log in my password, etc., I never log in that way. Instead, I go to the web site via my usual route -- from one of my bookmarks or by typing the name of the site into my browser. Then I log in, and I look for the pertinent info. Or usually, I can go back to the email, click the link, and I won't be asked to log in this time because I already logged in.

Robert