You'll get these messages claiming to come from your ISP, Ebay, Paypal, anyone you do business with on the web. Report them. Don't take them seriously for one minute.

The one I got from Ebay took me by surprise because the link went to something like
suspend/ebay.com - which is a pretty realistic link.

If these guys send out a million spam messages and get one idiot out of ten thousand, then they were able to access one thousand accounts.

Beakybird