When you get emails that you don't trust (or asks for this information) click on the TO: FROM: SUBJECT bar (usually gray and it's not in the text of the email) and then left click for properties.
Then read where it came from... it will most likely be a yahoo or some third party address.
Forward that email to the ISP where it came from, the FBI, the FTC, (and if you're me, I forward it to Customs).
Also, don't reply through email. Go to the bank, ebay, whereever it came from and then go into your account (login). If they need information they will send you a message within their system and will give you a number to call.
Hope everything works out well for you, and put the fraud alert flag on the three credit places.
Wayne