Eric, I’m curious why he was so intent on getting the last digits of your payment card? This information is shown in many places, albeit not public ones (such as the snail mail I’ve received from my bank in the past).

What was his next move after getting those digits? Try to social engineer someone into giving him the full card? Making him seem more legitimate for getting your password reset or otherwise disrupting your services?