Paypal Credit Card Fraud

MY CREDIT CARD ALMOST GOT COMPROMISED!

I received an email from "Paypal" requesting me to verify my card details online due to inactivity in my account. I thought it was quite legit cos I haven't been buying things online. So I clicked onto the link given in the email, which led me to "Paypal"'s website, the website looked exactly the same as the original Paypal's website please. Nice job there hacker.
I was asked to key in my cc's cvv number (the security number at the back of the card) for verification of my account. I stupidly keyed it in and pressed the "verify account" button. And then, it brought me back to the official Paypal website for me to login again (which I thought that there was an auto-logout after the verification).
All is well until about... 30 mins later? I started receiving OTPs from my phone, giving me the pin for my online purchases. I WAS NOT SHOPPING ONLINE! I received 3 of these texts in total. Which means someone is trying to do online purchases using my card details!

I called Citibank and told them that I received 3 OTPs on my phone but I was not doing any purchases. After some verifications over the phone, the Citibank officer told me that no transactions went through cos the "person who was doing the purchase" couldn't follow through the transactions without my phone's pincode. Thankfully. So he went ahead to cancel my card and will re-issue me a new card.
So guys, here's my story of how ingenious I am to give out my credit card's cvv online. Please, don't be like me. Lol!