The e-mail says:
----------------------------------------------------------------------
We have unregistered your mobile device
----------------------------------------------------------------------
Dear {$ME},
This Apple® mobile digital device was removed from your PayPal account: JC’s iPod.
The next time you log in to PayPal on this device, it will link to your account again.
When your device was removed, push notifications about PayPal transactions on your mobile device or online
+were disabled. You can enable push notifications by editing the settings/preferences in your PayPal app.
Apple is a trademark of Apple Inc., registered in the U.S. and other countries.
Yours sincerely,
PayPal
----------------------------------------------------------------------
Help Center:
https://www.paypal.com/nz/cgi-bin/helpweb?cmd=_help
Security Center:
https://www.paypal.com/nz/security
Now, it just happened to come through on a Paypal account, I haven't used in ages (I have two, but there was a country of account issue with one of them which was a bit messy), I put it off as phishing, but decided to check the headers and the DKIM Signature appears to be fine, SPF Passed, and it came from an MX that resolves properly and the IP used, is owned by eBay (which owns Paypal).
Apart from owning two iPod Nanos (which can't connect to the Internet and certainly aren't named JC's iPod, my Paypal creditials have never been close to a mobile iDevice.
I can't find anywhere on the Paypal site that shows me if an iDevice has never been registered against my account, and from a Google search (http://www.liquidsilver.org/2011/02/paypal-hacked-maybe/), this message does seem to be generated if the account is been used by scammers/fraudsters to steal funds (no Credit Card attached to this account makes me glad).
Does anyone know of any method I can track down how/why/legitimacy of the message (other than e-mail headers) (I am intending on contacting Paypal, but looking around my Paypal account, definately requires a map or something which they don't provide).
