Earlier this year, I made a booking for my mother online using her credit card. My name wasn't anywhere on the booking. I then called up and simply said I wish to upgrade her ticket using my skywards points. They asked for my skywards number and the booking reference and nothing more.

I'm not sure why they need your credit card details to confirm anything. Maybe the phone guy I was speaking to didn't follow the correct procedure.