online retailer asking for credit card photo

Description

I purchased something online from a high street clothing brand, and paid using Paypal, with security payment code sent to my phone. Paypal still flag it up as fraud and asked me to confirm transaction which I did, so the payment went through.
However, I received an email days later, where the customer care staff said it has been flagged as possible fraud, asking me for a copy of my ID and credit card. I just think it sounds absurd to ask for photo of my card and ID? But I have checked and the email is official customer care email of the company.
Any advice? Should I send it? (I can’t cancel and rebuy because one of the items have been sold out).
EMAIL FROM RETAILER:  » Unfortunately, this has been flagged as possibly being fraudulent on our system and has been placed on hold. To release this we need a copy of your ID and in the same picture a copy of the card that you used to make this purchase »