When I had my D40, I bought it off E-bay, from a store in New York. Something like that, I would only buy from a store on E-bay, not a private seller.

My D3000 I just got today, I bought at Best Buy, in a package deal.

It's a risk buying anything, from anyone on E-bay, it's just a matter of whether or not you're willing to take that risk.