*Sigh.* I'll say it again. Paypal is not unsafe. I've used them for hundreds of transactions, and never had a single problem. In fact, the one time I had an unscrupulous eBay seller try to take my money and not send me anything, PayPal gave me my money back.
I think some of you have fallen for or seen what are called "phishing" emails. These are NOT FROM PAYPAL. Scammers send out phishing emails that simulate emails from just about every bank out there... Wachovia, Bank of America, etc., and PayPal is just one more on that list. Paypal has never and will never send you an e-mail asking for your personal information. If you received one that claimed to be from PayPal and asked for your credit card number, etc. it was from a scammer.
byront, If someone used your credit card through Paypal, that means someone has gotten your Paypal password. Did you ever receive an email that took you to a site asking you to verify personal information for PayPal, and you had to "log in" to access it? If so, that wasn't really from PayPal, it was from scammers - and they now have your PayPal password. You need to change it immediately, and contact PayPal and let them know what's going on.
The e-mail your friend received was most likely a "phishing" e-mail, too. These scammers are getting really good - they now send out e-mails like that, saying that your account has been compromised, with links that say "click here to log in," and when you do that, you've just given scammers your password.
If you ever receive an e-mail from paypal that says anything like that, or asks you to verify information, forward it to
spoof@paypal.com . They'll send you an e-mail back telling you if it's fake or legit - and it's always fake.
I repeat - scammers do this to every financial institution, not just paypal, and it's no reflection on PayPal's safety. Paypal itself is exceptionally safe.