If you give them your paypal address they send you an email that looks like it's from paypal saying "You just received X amount of dollars for Mary! Click here to login to paypal."
They're hoping you click login, which takes you to a fake site that looks like paypal, where you try to login...