Company asking for card details to refund over email
Personally, I would just dispute this one with your CC.  I had a situation where a subscription I had cancelled the prior year was billed to me.  I called up to have a refund issued, they couldn't find me in their system under three phone numbers and two addresses.  The solution they proposed was "send us your credit card statement with the charge circled," to which I responded "there's no way in hell I'm sending you my CC statement."  Then I disputed the charge with the CC bank and it was gone about two days later.  I partially expect to have the same charge appear next year when they try to renew my non-existent subscription again. Now, whether or not this is a normal practice for the company, or just a call center person making a good-faith but insecure attempt to solve your problem is irrelevant.  Fact of the matter is, you tried to resolve this with the merchant and the merchant asked for something that's likely outside the bounds of your CC Terms and Conditions; sending your entire number via email.   Dispute it and move on.  The dispute process exists for a reason.