Hover over the link with your mouse and it will most likely show that it goes to a "bogus" website and not PayPal. The NAME on the email it came from might show PayPal but the actual sender is not from PayPal.
Its a Pishing Scam, where they lure to to a website so they can snag your log-in information and take your account. This is why 2-Factor authentication is recommended for sensitive log-ins; the ones where you punch in your password, then get a text/email with a code to verify its you.