I think it is the creditcard thing.
I get emails like that all the time.
For US and Australian citizens, it does not seem a problem.
Europeans are afraid of submitting information online.
Well, I can tell you that I set up a perfectly safe orderpage by using a SSL certificate from Thawte.
It is probably also interesting to know that during the past three years, we never had any fraud case.
Also, I implemented a logarhythm (mathematical thingie) on the order pages that will catch all non-existent cardnumbers.
Thanx to PHP ;-)
aj