that is awesome that you actually got money from them!

My dad did damn near the same thing. the guy was also using a legit business name that he was stealing/printing checks from and sending them for far more than the actual amount.

my dad mailed the check to the business to alert them.

I have done a lot of CL stuff as well but just blow the spammers off. usually the only issue I run into is when I want to buy something and then they tell me they are heading to iraq or a-stan or it was their husbands and they were killed overseas (really pisses me off).
they always tell me it is in another state and they are near the .mil base...so since I have free flight benefits on any airline, I explain I can come up and pick it up with cash and I also add in that I have a home right near them so it won't be an issue. I never get a response back for some reason.