Paypal will soon have for sale a one-time password token product. Designed to be carried with you on your key chain, it's based on a VeriSign device and will sell for five dollars.
Description of Key FobHere are some recently registered domain names for paypal phishing cases: