I also got this message - immediate red flags were that it didn't come through any official TradeMe contact routes, as well as them offering too-good-to-be-true payment amounts and the email address they used did not match the name 'Karina-Jo.' Ignored the message, but it's still really annoying and leaves me with an uncomfortable feeling that someone can just access my contact details like this.