I almost got suckered into an ebay phishing scam. It looked soooo real. I mean you could even click on the different links and they were real. It was telling me I had to verify my account information or I would jeopardize the status of my email account. I had put in my paypal info like bank account number, social number, then I got to my bank account PIN number and I was like,
"this ain't right". Then I realized that the messages were coming through my home computer and work computer on regular email (not ebay messages) I have gotten a few of these and always send them to ebays spoof site located in the security center on ebay. I'm usually a fairly skeptical person, so If I almost got conned into it, makes me wonder how many people have really been taken. I don't think anyone knows how many people are really scammed because often con victims never speak up because of the embarrasment.
I'm not 100% sure but I think you would be alright just opening an "email" or message through ebay. I don't believe attachments can be sent on messages; text only. Oh and mine stopped too after I reported three of them.