you click on it and log in to 'ebay'. When you click on the link from the email it takes you to a log in page, which is identical to ebay. You log in and it takes you to ablank page. oooops. That page is a program that tracks key strokes and now the person on the other end has your password, which they use to list false auctions on ebay, right after they change your listed email address and password. Good times.