I don't see it as that shady, to be honest. Small business wants to minimise costs so only accepts cash, but doesn't want you to go through the hassle of putting down a cash deposit (especially from abroad) and so will take a credit card number as security.

Yes, I'd want some assurance of trustworthiness before giving a credit card number, and I would definitely give it over the phone rather than by email.