The salutation is the tip-off as noted above.

When either eBay or PayPal contact you they will use your complete Christian and Surnames as seen on your respective account details pages.

That being said, any email received requesting personal info should never be replied to from your web based email account as that could be compromised without your knowledge.

Always go to the appropriate website (PP or eBay), login, then do whatever business is necessary.

Always check you browser address bar and ensure that it displays the appropriate web address - something like:

http://k2b-bulk.ebay.com.au/ws/eBayISAPI.dll?SalesRecordConsole

The part in bold and underlined is what you want to see - the parts in red will vary depending on what part of the site you are viewing.

When logged onto PayPal you will always see that the connection is encrypted (the first bold part):

https://history.paypal.com/........................./......../..............etc

All sites that deal with sensitive data should display the https (s=Secure Connection) and your data will be encrypted before transmission.

Major sites like PP or your bank will also display a padlock symbol in green to left of the address but smaller sites may just show the https:// which is less expensive but just as secure.

Sadly, much of eBay is not via a secure connection.

Apart from that make sure you have both good anti-virus and anti-malware packages installed and updated and run them at the very least weekly.

I run AVG anti-virus and Malwarebytes anti-malware as well as a network firewall (you could just use Windows firewall as a basic tool)