I get those from time to time too. eBay and PayPal are the most popular, since they handle lots of money and have the most customers, thus increasing the odds that a random address will be somebody with an account at either place.

The biggest red flag is that the phishing messages are in HTML format, which allows them to hide the true address of links in the message. They use the standard A tag, which might have something like "http://www.ebay.com"; visible, but the actual address you don't see is the phisher's Web site. eBay and PayPal always use plain text email where what you see in the links is really where you go.

Beware of HTML mail!