The other thing is ringing up your local takeaway and ordering a meal.
They have your card No, expiry date, security code and your address. In fact everything needed to place an order on a website - just need to give an alternative address for delivery.
Your card details could be written on a scrap of paper for all (including cleaners and mates of the staff) to see before the payment is processed.
Far fetched?? No - it happened to my wife!!!
At work we obscure card or bank details on insurance proposals once we have processed the transactions. Others may not be as diligent!!
Personally I think card transactions on the net and in person are safer than giving details over the phone, but stay sharp!!