Popperfly, I had a ebay account stolen from me like that. What I thought was an authentic request from ebay was actually a spoof. I reported it to ebay and the FCC but the guy was in Canada and so untouchable. You can bet your bippie I learned from that one. Every time I receive suspicious emails from ebay, paypal or any other account online I copy/paste it and send it to spoof at ebay dot com. That way they may have a chance of catching the would be thieves.
Thanks for the reminder.