In my opinion, blame falls on whoever was responsible for changing the address and not changing it back afterwards. If this usage of your account happened with your consent, then you should have checked.

I can't quite figure out how it ended up at your colleagues address if you paid for it. Sellers ship to the address on the PayPal statement. Was your eBay account linked to your 'friend's' PayPal details? Or did you pay via direct debit thus using the eBay listed name and address..?

As for the colleague, a bit difficult to gauge. Maybe he thought it was a Christmas present for his kid from an uncle or wife's friend he didn't know. Not many people outside of TF collectors know that a 25+ year old toy is valuable if in a good condition.

If the kid likes it and takes good care of it maybe you can take some solace in that. But, yeah, I'd be pissed about it too.

----------

It's not 'mail fraud' if the package is addressed to the recipient. It's not really theft if he thinks it's a gift for his kid.