My father is out $500 for 3 lousy domains (typical name extension coms swindles) and the typical GoDaddy "premium" services, because GoDaddy managed to find his new credit card info without him entering it.
That is GoDaddy found out the new expiration dates for his card. Seriously, they can do that. There is VISA/MC program which merchants can use to obtain new credit card information from previous customers.
Of course, it is his fault for not explicitly cancelling the domains, but GoDaddy can be an expensive lesson.