I have a little bit of 'net security knowledge (it's kinda my day job, when I'm not reading the Dis or daydreaming about moving to Disney)
Just be vigilent, don't ever think it won't happen to you.. know what's out there, ask lots of questions, and think about what you are doing everytime you enter your username and password -- think about where it is going, do you trust the pc you are using? etc.
IF YOU ARE CAUTIOUS.. using a CC on paypal is ok.. and so is having your bank account number on there.. if you want to be extra careful.. set aside a paypal only bank account and credit card -- don't use them for anything else, don't have a lot of money in them or a high credit limit.
How to be cautious:
DO NOT click on links you get in email - this includes, ebay and paypal
get out of the habit.. even if you think it really is from ebay or paypal, or your best friend's, mother's cousin in kansas who would never send you to a bad site, she just thinks those dancing kittens are so darn cute. You can live without seeing dancing kittens.. lol
DO NOT log into paypal from a publicly accessible computer (library, school, your friend's house --if you don't know how safe their PC is)
DO NOT use the same password for Ebay and paypal -- your ebay and paypal passwords (and preferably usernames too) should be completely seperate and different. They should also be different than your login/dialup/email/disboards/anything else username and password
DO NOT use file sharing programs (napster/limeware/bearshare whatever) files shared over the net often have viruses/trojans/spyware/keyloggers -- people should be far more afraid of this than of the record companies coming after them.
DO NOT download/install anything you aren't sure of or aren't sure you would trust.
If at all possible DO NOT use Microsoft Outlook to read your mail
DO use a firewall
DO use anti-virus software
DO use legitimate spyware checking software
DO make sure (atleast 1 x month) you install the latest updates and patches (go to microsoft.com and click downloads, or windows update)
DO change your passwords frequently
DO talk to your spouse/kids about keeping your computer safe (don't click links, don't open all email, don't download etc.)
DO watch your bank and credit card statements closely (every couple of days)
DO change your passwords if you think you may have given your password away to a fake site (go to the real site, by typing it in by hand)
Also.. I have noticed.. that when I get legitmate email from Paypal -- They use my full name.. First and Last.. someone who sends out a mass mailing (spam) looking to trick people into giving up their paypal info, doesn't have the info or take the time to put your first and last name in there (and they usually wouldn't have it anyway)
..and yes, paypal usernames and passwords as well as ebay ones, are commonly traded on the underground. In some cases they are more valuable than credit card numbers...
We have a *safe* computer at our house.. it is locked down very tight and it is the only pc we use for online banking/bill pay/paypal etc. We don't do online banking from work, friends or anywhere else.. if something bad ever happened I would be able to go to the bank and say "Look, I have always done my banking from this address. And someone messed with my account from this other address, see it wasn't me." That may be a little extreme.. but we're more paranoid than most because we've seen what's out there.
Heather