I ended up putting my card information on a bogus website that showed as a sponsored listing on facebook.com. i should have known better, but sadly, i didnt pay attention to the domain name and the site looked very very real.
the website is mk***best.com