Upvote:2
Supply what the company has requested, because that's what they want.
A letter "certifying" the purchase is worthless, as anyone could write it - it wouldn't have any weight.
A passport is an official document, and the card photocopy is to ensure that the purchaser does have physical access to the card itself