It IS legitimate. I received one 07/14 referencing a e-mail on 07/12, and yes, on 07/12, Paypal did e-mail me (I had asked about a broken security key).
But on the other hand, I very carefully checked the spam bucket plus any paypal communications when I got one of these, and I did NOT have any message from PP on or even near the specified date in the thing from echosurveys.
Loren
