I have had several "messages" purportedly from Earthlink asking for me to update my credit card information! Contacting ELink by phone, they assured me they are not sending out such requests and that it some scam-artist trying to get people's personal information. The scary part is that the scam message graphically looked like it came from ELink!
Personally, I do not send my credit card info via email to anyone. I admit this makes buying from web sources more cumbersome, but it eases my paranoia.