I get at least one of these a day. Never, ever type your ebay or paypal password in email. Never open ebay or paypal from a link, either. Always type the address in. I always forward it to spoof@ebay or spoof@paypal. With ebay, you should always do correspondence through "my messages". I check the box where you can hide your email address, also. You can see if a mail is from ebay as it will have your full name at the top, NOT your user ID, along with going to my messages. If it has your user ID it is definately phishing.

You shouldn't click on the link in the email either. I used to think it was fun to type in fake user ids and watch the addy and figure out the website it went through before the fake email page, but with so many trojans and spyware that record keystrokes, that isn't a good idea either.

I guess a good rule of thumb: Never type sensitive info in email. passwords, cc#s, etc.