Clicking privacy maybe provides warnings you could give to your boss. If you want to check on your Paypal account position, by hand kind PayPal's address in-to your browser and sign in normally.
I was able to tell that it was a spoof email as the email began with Dear PayPal member.' Paypal will always address you by your first and last name. They will never send you an email and address you as Dear PayPal member or such.
Another way to tell if a contact is from Paypal is to look at the entire header. The header is your indication of perhaps the email is from Paypal or-not. When taking a look at the header it should say who sent the e-mail in the very first two lines. Example in-the latest spoof email I received it originated in