They need exactly the same details as they do to put a transaction through in the first place.
So, Card number, start date, expiry date, issue number if there is one, security code off the back. If the transaction isn't being done in person, some banks/pdq cpompanies need the house number and postcode of where the card is registered.
Nothing else, ever.