Payu not trustworthy

I have used Payu for several services. I have had ********** use of my credit card on 18-02-2020. Purchases were made with my card for Mango airlines ticket by a *********. My credit card has never left my possession, I have never given out my secure details. My cellphone has also never left my possession, so how did that ********* get past the requirement for a one time pin I wonder.