I have today exaclty the same. Once you put sth on "2dehands.be" (second hand website), I got immeately several french written chat messages on the site of people interested and to continue the discussion by mail (they were all more or less the same). I was already surprised that there were so many reaction. The first person wanted to buy immediately and even pay the transport costs... I was already surprised that it was so fast decided, moreover because the same item was also for sale by somebody else for a lower price... Anyway... happy that it was sold so fast.
Then it was indeed asked to open a paypal account... And they focused on it that it is really safe. I already had one... Then I got immediately a mail similar to yours to proceed in two phases... And then I really got suspicous: 2 phases, first shipment, then money, NeoSurf, requested to reply by mail the information, etc... this seems not correct... I looked to my PayPal account and saw nothing. This confirmed my thoughts. When I examined the mail, it was sent from a "gmail" address <removed> and this is really not possible. PayPal does not use gmail accounts. In most mail programs, the complete email address is not directly visible (but a "display name" is shown)
So looked a bit around and found different websites warning for this kind of scram (eg http://www.dhnet.be/actu/new-tech/attention-aux-escrocs-sur-paypal-55199b243570c8b952f1e397).
So lesson learned:
* always check well the sender and his email address
* don't start immediately sending mails, but use the communication media of the ecommerce site
* it is not normal that payments to a NeoSurf account must be done to free up PayPal money
* PayPal won't treat information that was manually sent by mail to free up money
... View more