So I contacted a Canadian furniture manufacturer directly (Nightingale Chairs, been around since 1928, legit company, I triple checked their actual email) to buy a replacement part for my office chair.
Basically want a headrest. The stupid thing is ~300CAD on eBay because of duties and upsell.
Got a reply from someone claiming to be their Customer Care Manager with a nightingalechairs.com email address, proper signature block, direct phone line, the works. They are asking for just 100$ CAD.
The price and part number all check out. But then they attached a "Credit Card Form.xls" and asked me to fill in my card details and send it back.
I'm kind of shocked? I thought I'd get an e-invoice.
I get they're not a tech company but sending credit card info in plain text over email in 2026 feels absolutely wild.
The email itself looks legitimate (not a spoofed domain, correct contact info matches their website) but I just can't bring myself to type my card number into an Excel spreadsheet and hit send. Could they be going under and the CS rep is stealing CC info?
Am I overthinking this? Has anyone dealt with companies that still do business this way?