Re: Vendor wants creditcard and passport picture?
I got my KM from Hookah-Life, it should be perfectly fine. They're a drop shipper for hookah company by the way. I wouldn't worry about it at all because of that. Full disclosure: I have seen a bit of negative feedback on hookah life here.
Edit: Also, it's just a security precaution. John was ripped off for about the same amount iirc.