Large company normally required to align with PCI compliance that take the credit card pmt on security 3nd party tools or IT secured website tools. The card number can not go through from email but call or fax.