It’s a legitimate email from Eva Air. Got the same email from Eva just last month. (never got it before and I fly Eva a lot).
Not sure the reason for it except I was using a different credit card number than usual. These days a lot of companies are trying to prevent credit card fraud and making customer’s jump through hoops which is annoying…but also understandable given the amount of security breaches and fraud going on.