I think it was trap. Check with Paypal, but I doubt nothing was purchased. There were probably links on the email you received to "check your account" (or something similar) and THAT's the trap as clicking on it would have sent you to a fake log-on screen where they would have captured your info.

See Mojo's signature