I received one of these as a text msg. I ignored the message and then checked my PayPal and bank to see if there was a charge of $400. There wasn't but I deleted my PayPal account just to be safe. My reasoning at the time (March) was that sanctions on Russia would motivate a lot of Russian programmers to devote more effort into hacking Americans and I should reduce my attack surface.

There was a posting on HN around that time about a hacker accessing passwords stored in the browser. I didn't save it, but cleaned out my stored passwords just the same.