Paypal phishing attack on my online friend

Today I was having fun as usual on a discussion forum when a member I know came and said that paypal has told him that if he didnt immediately supply certain updates, they would deactivate his account. He posted a screenshot of the mail and it was a clear phishing attack. Came from a girlish yahoo id and gave a link for him to click and post the details. He suspected from the fact that he already had a good amount on that account.

I advised him to immediately alert the paypal team. Wonder if someone has been a victim already. Beware paypal users, if you receive a similar mail, be very sure before clicking the link.