I got a paypal phishing mail the other day that used a real PayPal mail, precisely, as template; only adding their bit (telling you to log in to their phishing site and give your password and details) near the start.

Which meant that shortly *after* that text was PayPal's standard disclaimer 'we will never ask you for your password or personal details in an email'. :)

I doubt it affected their success rate, but...