Toby has such a simple autograph that it's quite easy to forge. Because of this, unfortunately, I wouldn't trust any 2nd party that's selling one. Looks like to me it's no good.
Here are several IP examples. Sorry about the resolution. I am traveling and had to snag these off my website. The high res stuff is on my office machine.
Good luck. I don't know if it is real either. It could be easily faked and a photo of Tobey means nothing unless it was a photo of him signing that exact item.
If you like authentic autographs you need to visit this site:
Check out our online authentication database with in-person examples here: http://www.worldofautographs.com/list.php (let us know if you have any requests & if we have examples we will add them)
We are Autograph Fair Trade Association (AFTAL) Approved Dealer #AD123. Learn more here: http://www.aftal.org.uk/