After you pointed this out to me, I learned a way to against this risk - so you can actually purchase a voucher there and then redeem the voucher without even giving away the account number.