The problem in my view is that you are using an exchange. Maybe if you use a decentralized solution like Robosats you don't have this problem. Communications can be made directly with the user without a trusted third party. About credit card in another country, I believe it can help, however, it is important to check that the countries and the company do not share information with the country in which you gave your information, because if they do, it could be a problem too.