Yes, never use the email links to go to Paypal. Always use your normal saved webpage. You can report the email to Paypal, who may ask you to send them the email, or explain how to send the part they need to identify where the email originated from, so they can stop further use of that one. But, like anything else, it won't stop them making a new one.