Yeah, you hit it on the head.
PayPal confirmed that it was indeed a scam.
The e-mail was in HTML and looked totally legit. All URLs appeared to point to paypal.com, but upon second look, they actually pointed to paypalsys.com.
Luckily, I didn't do anything. But, I did turn everything in. Fun.
:)
-Jason