Supplying details via email to refund Debit card

Philthy

Hello.

I made a payment earlier in the year to a hospital.
I am due a partial refund of that payment, which I have recently requested.
I received an email from a senior member of the hospital's finance dept the other day, asking that I give my credit card number (actually a debit card in this case), and the card's expiry date, in order to action the refund.
I'm assuming they mean me to email that info., as no mention was made call them or phone number given.

Is it safe to email those details? It's all legit, but with the stuff you read about I want to be sure. I don't use credit cards.

Thanks

chunkychocky

No. They obviously don't know much about PCI Compliance if they are asking you to email those details. By all means call them and allow them to enter your details directly into their card machine to refund it, but they shouldn't even write your details down unless they have a massively high PCI Compliance level (which most places don't).

Philthy

Okay, I'll call them.
Ideally I'd go there in person, but the place is a bit too far away to attend just for this purpose.

Thank you for your help.

jonesMUFCforever

Ask them to send you a cheque if you do not trust them.

Hedgehog99

They say you shouldn't write anything in an email that you wouldn't write on a postcard. Do it by phone if you cannot go in person.

Archi_Bald

If you made the original payment by card, they will have your details on file. So it should suffice to ask them to refund to the card.