There are ways that people can make a message 
look like it's coming from a given address even 
though it's not. Report this to Ebay, since Ebay 
will be *VERY* interested in stopping it.

One way that people can steal credit card numbers 
is to send a fake message to the person that 
there's a problem and have the person re-enter 
their number on a fake site. (Which actually 
belongs to the card number thief.)  It happened 
with Paypal before, and the thieves were caught, 
but only after they'd already amassed **MANY** 
card numbers.

SO REPORT IT!! Immediately!! Even if it's a false 
alarm, it's better to be safe than sorry! O_O;

Many Sharp Smiles,
--Drac