[quote name='Wolfpup']How the heck can they bill you without your new credit card numbers?
[/QUOTE]
I work for a credit card company. Depending on how the new number is generated and the reason for it, it will just be carried over per the card issuer and their SOP/protocol for furthered transactions...partly, that has to do with merchant agreements. It's like a closed account, just because somebody closes an account doesn't mean that auto-billing charges (like a gym membership or ECA, etc...) will stop, the authorization that the merchant is given by the issuer states not only can the initial charge be posted/accepted, but it includes authorization for continued, subscribed charges as well, and that often supersedes many scenarios, like closing an account, etc...It depends on how the old account was closed and why it was closed, that will determine what happens when these ECA charges are attempted again. In the case of fraud, it does NOT supersede...the account is now compromised, that's above and beyond a legitimate "subscription service"...
That's not to say that any of this perpetual ECA BS is legit nor ethical, but if they're weaseling out of cancellations or putting charges through via new account numbers, that could be how they're making it happen, exploiting the way credit cards work.
The best way to handle it is to state to the card company/bank that a shady merchant (true story) has the card information and you have proof (the email, etc..) that they are not to be charging it again but much evidence has shown they will anyways. ECA's practices are basically illegal for all intents and purposes, it is committing fraud, no different than if a grocery store clerk wrote down your info and rang up more stuff after you left the store. If it's an accident then? The scale of this catastrophe makes that a hard case to sell, but if so, it's a dispute then. It's an unauthorized transaction that you have rightfully and officially canceled out of and invalidated. Reporting the account compromised (again, true story) is in the bank's best interests too, as much of the time the bank could just be writing off losses, they don't want that anymore than you want to unjustly pay $20. They'll gladly shut down a compromised line of credit and issue a new account in its place.
If it's already posted, you can either dispute the charge (for example, VISA has dispute regulations/policies, regardless of the bank) if it's already gone through or again claim fraud on the account and it will still be addressed accordingly. Technically it should be classified as a dispute if it's already posted, but who the hell knows if this sh*t will happen again in 2011, so it could be a security risk too.