I got one too just 2 days ago. Mine was exactly like the one described. Pretty darn sneaky!! Hope no one falls for it because it would be a nightmare for them!!
   But I too was suspicious when it asked for the card number, number on back of card and pin number, etc. as I would never give that information to someone who emailed me. What is creepy is how do they pick you? I am on ebay alot but do not use C2it to pay although I had gone into their site once recently when a seller mentioned it as an option for payment. I reported and blocked this email to aol with a note about the seriousness. Hope they pay attention. Citibank has something about fraud email on their site but it doesn't match this one. Must be a new scam.