E-bay, Secret Service (who has jurisdiction over this kind of scam), the ISP of who sent the message. (Although one can reasonable,expect it was a bogus name and address they used to get the account.) Depending on whether or not they are large enough or have shown interest in the past, your local PD, County Sheriff/DA or State AG office.