My recent anti-fraud phone call, I believe, was triggered by a (legitimate) £1 transaction to a "Private Venture Company based in Luxembourg[1]". The company processing the card transaction on behalf of a seller may not be based in the UK.
[1] Known to me, and possibly you, as PayPal