It is paypal, phoned to confirm account, was genuine and secure, didn't ask for any secure details, just wanted last 4 digits of bank account to confirm i was the right person, nothing that could be of use to anyone else.
Checked on my paypal account after and changes had been made.
It can be trusted.