That's true, but another possibility is that the same fake eBay email that "Toni" used to steal sellers' passwords was also used to solicit users' addresses and credit card information (which he then used to register both websites).