from https://news.ycombinator.com/item?id=28524077

> it looks like JustUseApp was collecting money for the virtual cards by pushing through unauthorised payments to the users original card.

> Additionally in the EU, the introduction of Strong Customer Authentication basically makes these types of transaction completely illegal

Was this the case?