This problem is so common that some card issuers block the credit card for any transaction without the actual card. For each online transaction you have to request them to temporarily allow online transactions.
It is not efficient, but is certainly safer.