When you purchase game cents from Evony, you may ONLY do so via a secure payment gateway such as PayPal or Moneybookers. These gateway sites all offer 128-bit SSL encryption and have security guarantees. Evony never sees your credit card. We don't see the number, the name on it, what bank issued it, etc. Nothing. All we get is a notification that player X on this server has purchased $60 in coins. Paypal transaction ID #blahblahblah.

If you access the "Purchase cents" option from within the game, we direct you straight into a secure payment gateway.

I think you may have either gone through some other site to purchase your coins, didn't access it from within the game itself, or the card had to have been used elsewhere.

Edited to add that there is no way in the case of a card cloning that it could ever be determined where it occurred short of something like video footage of the ATM machine that had the fake scanner on it or the clerk at the store swiping your card in the store's machine AND his own below the counter. Things like that. I'm not sure if you are just trying to cast aspersions on the game or if your bank gave you inaccurate information, but this is absolutely not true.