fair enough, but having people read out card details over the phone is standard practice afaik. For secure payment I'd recommend transferring elsewhere, or sending a link. If you ever make that info available to an LLM, it needs to be a private one, and you'll need to ensure this part isn't recorded.