use Perl

I think phishing is becoming reasonably well publicised for a lot of people to know the risks, yet it never ceases to amaze me how legitimate companies missuse email communication - I feel it wrongly gives consumers a false sense of faith in the medium.

I was quite angered when I recieved the following from a company following an online purchase - needless to say I won't be complying with their wishes.

Does anyone know of anyone who I can complain to about this - how can a legitimate organisation justify requesting these kind of details over an unencrypted medium - if at all?

Dear XXXXXXXXXXXXXXXXXXXXXXX,

I am writing to request that you provide XXXXXXX with a copy of a recent statement for the card used to place the order for XXXXXXXXXXXXXXXXX XXXXXXXXXXXXXXXXX XXXXXXXXXXXXXXX XXXXXXXXXXXX.
This is an added security measure to help against credit card fraud.
Please fax to XXXXXXXXX, FAO XXXXXXXXXXXXXXX or alternatively you may scan the statement and e-mail it to XXXXXXXXXXXXXXXXXXXXXXXXXXXXXX quoting booking reference XXXXXXXXXXX on all correspondence and blanking out any transactions & balance amounts if you wish, as we only need hard copy verification of the details already provided.
Incorrect details may lead to your order(s) being cancelled in the event of failing our further security checks. If we have had no contact within seven days any orders booked may be cancelled and a full refund applied to the credit/debit card used to place the order(s).

All documentation received will be handled in confidence, in compliance with the data protection act. Many thanks in advance for your cooperation and we apologise for any inconvenience caused.

Yours sincerely,
XXXXXXXXXX, Tel: XXXXXXXXXXXXX
Customer Services - Card Verification Dept.
XXXXXXXXXXXX
XXXXXXXXXX
XXXXXXXXXX
XXXXXXXXXX
XXXXXXX
XXXXXXX, Registered in XXXXXXXXXX no. XXXXXXXX