One of the most successful of these scams was by the people who operated www.paypa1.com (that's www.p-a-y-p-a-one.com, linked in their emails).