I'm attempting to place an order with an American company and I reside outside of America. Upon placing the order (and already submitting payment) I received an email asking me to fill out a PDF document to verify my identity and prevent credit card fraud from foreign credit cards.
This document asks you to fill out your credit card information again, as well as photocopy your government ID as well as the front and back of the credit card. Upon filling that our you are expected to scan the PDF, and send it back.
Is this a violation of PCI (or similar compliance standards)?