Based on your financial expertise, provide your response or viewpoint on the given financial question or topic. The response format is open.

Company asking for card details to refund over email
I used to work for a online payment posting company. Anytime a payment is made via Credit Card to a company that does not have PCI DSS(aka the ability/certification to store credit card information) there is a MD5 checksum(of the confirmation code, not the Credit Card information) that get sent to the company from the processor(billing tree, paypal, etc). The company should be able to send this information back to the processor in order to refund the payment.  If the company isn't able to do this, to be honest they shouldn't be taking online credit card payments. And by all means do not send your credit card information in an email. As said above, call the company's customer service line and give them the info to credit your account.