Everything has already been said above.
I get these as well. I have a few rules I live by.
1. I don’t open most emails that I don’t know the sender.
2. I do look at the sender info by touching the name of the sender. Frequently, they are some personal email address from a foreign country like .jp
3. I look closely at logos, grammar and spelling. These are a dead giveaway. Logos are blurry and misplaced, spelling, punctuation and grammar are bad.
4. If I think that there is any possibility that it could be real, I never click on the links in the email, I go directly to the real website and login and/or call the phone number listed on the real website.
5. I block sender, move to junk and make sure that the email is deleted.
6. For my business emails, which I send out thousands of emails to publish my events (I am an auctioneer and I promote my upcoming events using emails) I set up a public email address “info@xxxxxxx.com” rather than my direct email. That way I don’t make myself a target by publishing my direct email address. I can see all the spam that comes into that email address and respond to the real ones quite easily.

These guidelines save me quite a bit of stress as I think I avoid most of the potential pitfalls following these guidelines.

I have received the PayPal scams in the past. I spoke directly with PayPal and they told me to ignore and delete them. These people do not have access to my login information. It is annoying and we must stay vigil and discerning. Hope this is helpful.