In every bid notice that we get from ebay, is the following statement:

"eBay will not request personal data (password, credit card/bank numbers, and so on) in an email. Learn how to protect your account."

I wouldn't answer any request, claiming to be from ebay, asking for any of that information. In the actual email from ebay, the words "protect your account" are a link.