If I want to top up my son's PAYG phone online, I need to register online. Which is fairly normal. However, I also need to register a card with them, ie so that they get to keep my details and if someone breaks into my account, the details are all there for them to use.
Is that normal? Even with Amazon, you can tell it not to save your debit card details.