Simon Willison’s Weblog

A typical phishing email will have a generic greeting, such as 'Dear User'. Note: All PayPal emails will greet you by your first and last name.

— PayPal's Phishing Guide