I have received a scam email, notifying me of an invoice. The sender was shown as paypal.com. I know that part can be spoofed. Links within the email led to an invoice page at paypal.com.
Giveaway clues: the email came to an account which has no association with PayPal.
The salutation was User. PayPal do not address their customers like that.
I have conducted no business which would generate the purported invoice.
What particularly stood out, was that the links led to genuine PayPal content. I tried one in the online sandbox at
Browserling. This revealed that PayPal have deleted the scammers' file(s), on suspicion that they are a scam!