^^^ This! ^^^
Make sure your browser establishes a secure link (closed padlock symbol).
Also, make sure you go to the application via the card's issuing financial institution. For example, if this card was coming from The Bank of New Jersey, you go to
https://www.bonj.net/ instead of clicking on some link you got in an unsolicited email.