Something isn't right. They ask for the 2 digits before the last 4, and then let him guess the first two.
I'm really interested to see godaddy's response to this...I'm sure paypal records their interactions, I would imagine godaddy does as well. Hell, I called Avis about something 2 months later with a dispute and they pulled the recording to make sure I wasn't BS'ing them.
http://en.wikipedia.org/wiki/List_of_Issuer_Identification_N...