Thanks Kaz.
After all this time we should not need to be flagging these things up, but some people will not learn.
I mean the public not VVers, btw.
Just look at the "supposed" Westminster City Council site, which is cut short:
Name on card
Card number
Expiry date
Security code
Account
and no doubt more.
Why not go empty your account, put the money in a bag and leave it on a bench? Same outcome.