The first big hint is if you don’t even have a PayPal account, or an account at one of the many banks that these crooks try to hit. Another telling factor is grammar and spelling in the email. Many of the people running these online phishing scams are from overseas and they may not speak English all that well, so it’s quite common to find numerous misspelled words and grammatical errors in the emails they send.
Another telling factor is that the website may not show the correct URL at the top of the screen. For example, it’ll have a bunch of numbers (197.123…) instead of www.PayPal.com. Also, your PayPal or online banking site should be secured, and the address will begin with https instead of just http. The people putting up the phishing sites won’t bother to secure it, and that should be a dead giveaway. As a general rule, you should never provide any kind of money-related info on a web form that isn’t on a secured page.
Phishing scams can work via email or even over the phone. If you get a call from someone saying you won a lottery and they want your bank account info to deposit the money, just hang up. If you get any kind of call saying you won a prize and need only provide any kind of personal info for ‘verification purposes’, you might be getting phished.