Thailand pass is free, no CC needed. If you had any sense, you would’ve booked the hotel with Agoda, totally covered. I don’t understand why people don’t do this, you still have full contact with your hotel in case of changes. Vaccination booking???? That’s an issue with you government or health service.
This was nothing to do with the Thailand Pass. Don’t advertise it as such or link it to the TP. Scare gullible people for no reason.
Edit see you booked on Agoda. Your device that you book with has likely been hacked or you downloaded something that is catching your card info when purchasing.