That's what they mentioned in the initial email: "We recently identified payments on your Stripe account for Travely eSIM that don't appear to have been authorised by the customer, meaning that the owner of the card or bank account didn't consent to these payments.". I do have 3DS enabled + Strict Radar rules + custom backend to auto block fraud users + manual review and refund for suspicious payments. It is weired after investing in integration with Stripe and doing everything possible to have a good account that you get blocked without a notice.