Payment card phishing litigation: