‘Someone on the phone reading out their full credit card number, expiry date, CVV, and billing address.’