This is the second time this has happened in the past six months (and it's happened before that too). I've explained to them to not give our personal information willy nilly. How to spot phishing emails. Always check the actual email address. If you're on a website, see the actual URL. Contact the store directly. Don't not reuse passwords. I've set up things to make it easier for them as much as I can.
But I'm feeling so lost now. I lost my temper today. I know I shouldn't have done so. Obviously, they feel bad. We've locked the card and contacted the bank. They'll send a replacement. It's done, for now. But I know their information is out there. Their phone numbers, address, probably even their passwords.
It's like fighting a losing battle, hoping they never make a mistake that'll cost us thousands, if not more.
I imagine they're over 65, so just cut them off from shopping on the computer. They made it 40 years without it, and they've shown they don't have the skillset necessary to use it, or the ability to learn. Stop it now and permanently. It sucks, but only a little compared to the losses they could accrue.