I did a buy now and paid via credit card.  I received an email supposedly from Trade Me asking for a 4 digit verification code from my bank statement.  I have never had this before and don't know if its a security risk or not.  I have tried contacting Trade Me twice now but haven't had any response to date.