Let me offer a really good simple tip for Ebay users.
Make your Ebay email address different from every other email address you use.
So if your name is Joe Bloggs, and say you use yahoo email, and your normal email address is
[email protected], then knock up
[email protected].
If you have your own domain, say bloggs.co.uk, then use
[email protected] normally, and use
[email protected]. Or
[email protected]. Etc.
Then, in your email program, set up a filter on the incoming emails so that only the "ebay" addresses end up in a box called "Ebay".
Then spam pretending to be from Ebay is instantly recognisable as such.
The most likely way somebody's Ebay account was hacked is by phishing. The idea behing a good pfish is for the target to net realise it even afterwards. The pfish site will redirect you to real Ebay immediately, even very kindly logging in for you (they have just captured your login+pwd, after all) so you know nothing about it.
The other thing, never enter Ebay by clicking a link supplied in any email. Always select it from your Favourites, or better still always type in the full URL each time.