A click of a few buttons and she had lost £1,500. But Camilla Jackson is not alone. The scam - known as phishing - saw bank customers lose £40 million in the last year.
Camilla, from Wiltshire, has been telling ITV Meridian how she unwittingly sent con artists her password details for an online finance site. Within hours, the money was gone from her bank.
In a statement, Paypal told us: "Like many other online banks, shops and services, PayPal can be targeted by criminals who use fraudulent emails.
"If you have any doubts about an email claiming to be from PayPal, don't click any links in it. Instead, log into your account normally. You will have a secure message waiting if PayPal does need you to take any action."
Robert Murphy reports.