On December 13th, I received an email from PayPal that I had a "shopping notification for JD Sports". I have never bought anything from JD Sports. The email looked like spam, but checking the headers showed that it was sent by PayPal. I ignored it but receved a "reminder" on the 15th and decided to investigate.