People took to social media to demand where the payments company got their details despite never using the firm.