Thanks for this note, and suggestion.

Indeed, I first checked my bank and PayPal accounts. Thankfully, there was no activity.

The only piece that was connected to me was the email address. But that wasn't what was important to the eBay representative - it was finding my information, even though I don't have an eBay account. Not once was the question asked about the user ID associated with the actual account.

Kind of makes me wonder who was the more aggressive phisher in this case.