Just got a similar gag, supposedly from Paypal
This is apparently a common trick. Other similar tricks will activate a virus when you click on the attachment. Some of these e-mails are authentic-looking enough to fool almost anyone. I got a "Microsoft" one that even had working links to Microsoft in it.
Key fact to remember: no legitimate operation will EVER ask for things like your Social Security number or bank account number in an e-mail.