Whenever I get an “official” looking email from Paypal, my bank, or anywhere I have an account tied to financial info I look at the links before I even finish reading the email.

The example Mike showed had this in the link URL = vfikj.cn

Being in Canada I may not have picked up on the “centre” vs “center” spelling part.

British English (re “centre” spelling) is commonly taught throughout Europe, East Africa and Asia. For what its worth, the header on the email indicated that it originated from an IP address in the Netherlands. So while we can assume that they were not native American English speakers, they were not necessarily from the UK.

Mike Blumenthal