"Hi user - ID (email address went here)
Your payment was accepted for auction 'XBOX 360 4Gb Slim Console' (#408303501). The seller has been instructed to ship the goods. XBOX 360 4Gb Slim Console
**** **** **** ****
$24.00 Courier for Rural Area
If you haven't received the goods within seven days, please let us know. If you have any problems with the goods, please contact the seller directly.
Note: If you haven't authorized this transaction ,click the link below to cancel it and get full refund.
Go to Trade Me and cancel your transaction at :
The Trade Me Team
I copied the email into a spare VM I had running and followed the links which went to a fake Trade Me site hosted on a compromised webserver. The site requested TM login details (I entered false ones which the site accepted) and then the following page requested credit card info (name, card number, ccv, credit limit) to be able to cancel the transaction.
I made sure to pass this all on to email@example.com but make sure to tell your friends (especially parents with kids piggybacking off their TM accounts) to watch out for this one.