I once dealt with a company that required me to send them a copy of my CC, and driver's license for verification. It was like $100 worth of stuff too, it wasn't that much. Needless to say, I never bought from them again.
Anyways, I like the idea of getting a copy of the card, just to see what he'll send you. I also like the idea of calling up teh bank, and report the card stolen. You as a consumer CAN call other people's cards in. I do it often where I work, as I get a lot of people try to pass off stolen or copied debit/CCs through me.
Report the card stolen, then message him back saying that it didn't go through, and that you'll need another card number. Repeat this process, and see how many card numbers you can get out of him,