Can an on-line retailer request ID and a photo of the credit card?

Recently while shopping on-line, a store sent me an E-mail to say in short, "The transaction failed to verify, please send us a copy of your ID and a photo of the credit card you used for the payment." They suggest driver’s license or passport.

While in-person, I know businesses will sometimes check ID and credit cards, but I’ve never seen such a request on-line.

I paid for this purchase using PayPal and not directly on the retailers website.

Is that a thing? Is that even safe?