yes, that is happening to me real-time, the article in the Economist reminded me (https://www.economist.com/business/2026/07/01/can-bending-sp...), right down to Evernote being the one they are attempting to gouge me on at best and charge illegally at worst. so i had a closer look at bank and PayPal GLs

i found similar issues with Paddle (attempted to quit), Proton (double charged), Splashtop (attempted to quit), and Bloomberg via Apple (attempted to quit) and the common thread is PayPal. never Stripe.

my PayPal account is ancient (2002) and knowing what i know about payments (perhaps a little) i believe there is something akin to a hole regarding legacy pre-auth tokens in a PayPal architecture which is old enough to run for the US House. at least Bending Spoons would be willfully exploiting such a hole, because after i refunded / cancelled, 9 days later they were able to charge again. PayPal also seems to have an open marriage with PCI-DSS / SOC2