Same message, and she updated, including providing cc # and the number from back. Luckily I got there just after it was sent. Called cc company, changed ebay id, new password, went though every account where she has email id and password and changed all the passwords.
Took a while, hope she learned.
ot: Amy not satisfied with critter? ;-)