Why Replacing a Card May Not Stop a Subscription

Your credit or debit card was reissued months ago. Perhaps the old card expired, you upgraded to a new rewards program, or your bank sent a replacement after detecting card fraud. You assume any lingering subscriptions attached to the old card number will quietly expire with it.

Then your statement arrives, and a subscription you never canceled appears on the brand-new card.

The billing statement displays your new card digits, but the charge is from a company you never gave that new number to. It feels like an error, an unauthorized charge, or even a security breach. In reality, it is a payment rail feature operating as designed.

The facts and procedures below were verified against primary card network developer documentation, federal regulations, consumer financial protection guidance, and United States card issuer disclosures on October 1, 2026.

How did the merchant get my new card number?

Merchants do not need to guess your new card details or intercept your mail. Your bank and card network give the updated details to them directly through automated network clearinghouses known as account updater services.

When you sign up for a monthly gym membership, cloud storage plan, or streaming service, you establish a recurring billing agreement. Historically, whenever a card expired or was replaced, every recurring charge failed until the customer manually contacted each vendor. For merchants and card issuers, these failed transactions caused churn and customer drop-off. To eliminate that friction, the payment card networks built automated pipelines to push new card details to merchants.

Visa's Account Updater developer documentation says the service lets issuers, acquirers, and qualified merchants exchange updated account information for recurring payments, credential-on-file transactions, Visa Direct, and purchase returns. The updated information includes primary account numbers, expiration dates, closed accounts, and cardholder advices.

Visa's Account Updater FAQ is more specific about how that exchange works. Enrolled merchants submit inquiries through their acquirers. Updates are not pushed to every merchant. A response can include a new account number or expiration date, a closed-account advice, or an advice telling the merchant to contact the cardholder. Visa gives one example of that contact advice: a divorced former joint account holder opens a new individual account. Visa also says the acquirer forwards inquiry responses to the requesting merchant within two business days. That is a file-timing rule for the merchant, not a date by which a charge will appear on your statement.

Visa's getting-started page lists the account changes the service supports:

1. Account renewal or replacement.
2. Account upgrades or downgrades.
3. Portfolio acquisitions.
4. Mergers or account closures.
5. Lost or stolen card replacement.
6. Account closures.
7. Conversions to Visa from Mastercard, American Express, or Discover.

Each of the four major U.S. card networks has an updater program. The documentation behind each name is not the same:

When your card is reissued, the issuer can place the new account details where an enrolled merchant's inquiry will find them. If that merchant participates and checks before it bills, the processor can receive the new number and expiration date, store them, and charge the open account. If the account is closed, Visa's FAQ says the response can be a closed-account advice instead of a new number.

The four rows above are not equally documented. Visa's pages and Discover's 2026 merchant guide are network documents. Mastercard's consumer details in this article come from two issuers. American Express Card Refresher is described here from Recurly's account-updater documentation. No American Express consumer page stating those enrollment rules was found on October 1, 2026.

Does every subscription follow me to the new card?

No. A reissued card creates an inconsistent billing landscape. Some subscriptions follow you seamlessly to the new card, while others abruptly decline. This unpredictability creates confusion, but it stems from four concrete structural boundaries.

1. Merchant participation is entirely voluntary

Payment networks do not enroll every merchant. Discover's 2026 guide tells a business to enroll, connect, and send inquiries before it receives updates. Banner Bank's Mastercard Automatic Billing Updater page says only participating merchants receive updates, those merchants choose how often to check, and the bank does not know which merchants participate or how often they check. There is no public participation list. A national biller is more likely to be enrolled than a small local publisher, but that is not a rule you can apply to a named company. If the merchant is not enrolled, a charge attempt against the old number should fail, and the merchant will usually ask you for a new card.

2. Merchants determine update inquiry timing

Even among merchants that participate, updates are not instantaneous. Bank of America Merchant Services tells its merchants that a token harvest updates expired tokens monthly on a harvest date the merchant selects, and that American Express tokens update daily. That is one acquirer's schedule, not a Visa or Mastercard rule that every response file is monthly. Visa's own FAQ uses a different clock: after an inquiry, the acquirer forwards the response within two business days. Neither number tells you the day a charge will post. A merchant that bills between checks can still see a decline. A merchant that checks after the update can bill the new card.

3. Product upgrades may not alter your primary card number

Not every card reissue involves a new 16-digit card number. If you upgrade from an entry-level cash-back card to a premium travel card within the same bank, your core account number may remain unchanged.

Guidance from U.S. Bank's knowledge base says that on a credit-card upgrade the number most likely stays the same. You may be assigned a new expiration date or CVV. If the information does change, U.S. Bank says you need to update merchants that keep the card on file for automatic billing, and your digital wallet. When the number never changed, a merchant that already stored the card can keep charging without an account updater.

4. Direct bank account debits operate on separate legal rails

If a subscription debits your checking account directly via the Automated Clearing House (ACH) network using your routing and checking account number, card network updaters have no role in the transaction. ACH transfers are tied directly to your underlying deposit account. Replacing a plastic debit card has zero effect on an ACH direct debit, which will continue charging your bank account uninterrupted until explicitly revoked under federal banking rules.

Is replacing or canceling a card the same as canceling a subscription?

No. Treating a new card number as a cancellation is a common way an open subscription turns into a past-due balance. Whether that balance becomes a collection account or a credit-report entry depends on the contract and on who, if anyone, reports it.

To understand why, consider the three distinct actions you can take:

When you sign up for a service, you enter into a legal agreement to pay a periodic fee in exchange for access. Giving the company a credit card number is merely naming the payment mechanism. Replacing the card changes the tool used to collect the money, but it does not dissolve the underlying agreement.

Official guidance from the Consumer Financial Protection Bureau (CFPB) states the boundary in these words: cancelling an automatic payment does not cancel what you owe. For an ongoing service such as cable or a gym, CFPB says to cancel the contract with the company as well as telling it to stop automatic payments. If you only stop the payment method on a loan, you still have to pay another way. Late fees, a suspended account, a collection notice, or a credit-report entry can follow from that contract, and from whether the company or a collector reports to the bureaus. CFPB does not say every unpaid subscription is reported.

What if the new card came after fraud? Are those charges wrong too?

One of the most frustrating consumer scenarios occurs after identity theft or card skimming:

1. You notice fraudulent charges from an unfamiliar vendor on your statement.
2. You notify your bank; they cancel the compromised card and issue a new card with a new number.
3. Two weeks later, legitimate charges from your gym, music streaming service, or newspaper subscription appear on your new card statement.
4. You wonder: if the card was closed for fraud, how did anyone get the new number? Are these subscriptions compromised too?

Visa's getting-started page includes lost or stolen card replacement among the changes Visa Account Updater supports. The updater does not sort merchants you still want from merchants you consider fraudulent. Banner Bank's FAQ asks what to do if you had fraudulent recurring payments and do not want that merchant to obtain the new card information. The bank's answer is to opt out, then contact only the merchants you choose. A recurring biller that already has a relationship can receive the new number unless you opt out or your issuer blocks that biller.

A replacement also does not, by itself, mean the fraudster received the new plastic. The new number is issued to you. What can move is an existing billing relationship at a participating merchant. Dispute any charge you never authorized, whether it posted on the old card or the new one. A gym membership you did authorize is not fraud merely because it survived the replacement. Cancel that membership with the gym.

The account is closed now. What happens to the charge?

If you decide to close the credit card account completely rather than just replacing the card, the mechanics change significantly.

Visa's FAQ says an inquiry response can be a closed-account advice instead of a new account number. Bank of America Merchant Services tells merchants that a fully closed account is identified on a report so they can contact the customer for new billing information. A participating merchant should not be handed a fresh card number for an account that no longer exists, so that card charge should not reappear on a replacement card. The merchant can still treat the subscription as unpaid and ask for another way to pay.

Account closure is a security tool, not a debt cancellation. Depending on the contract, you may get emails asking for a new card, past-due notices, late fees, or a collection attempt. CFPB's rule still applies: stopping the payment method does not cancel what you owe. Cancel the subscription with the company if you want the contract to end.

What can I ask my bank or card issuer to do?

When a merchant refuses to cooperate or your cancellation request is ignored, your card issuer and federal banking regulations provide enforceable defense-in-depth mechanisms. You should understand the scope, cost, and legal boundaries of each option.

1. Opt out of card network account updaters

Some cardholders prefer that no merchant ever receive updated card credentials automatically. Certain financial institutions permit cardholders to opt out of network updater programs.

For example, Citadel Federal Credit Union's Mastercard ABU disclosure states that members can opt out of the automatic billing updater directly through online and mobile banking. Similarly, Banner Bank's ABU policy notes that cardholders can opt out by phone or by visiting a branch.

However, opting out carries a significant operational tradeoff:

• The benefit: Discarded card numbers will not automatically forward charges to your new card.
• The risk: Every recurring bill you do want—utility bills, auto insurance, phone service, web hosting—will decline the moment your card expires or is replaced. If you forget to update an essential service manually, you may face service termination, reinstatement fees, or late penalties.

Opt-out is issuer-specific. Visa's developer pages do not describe a cardholder opt-out switch. Ask your own issuer whether your card can be removed from the updater. Banner Bank and Citadel document a path. Another issuer may not offer the same one.

2. Request merchant-level authorization blocks

If you wish to retain automatic updates for normal bills but want to block one rogue company, ask your issuer whether they support merchant-specific card blocks.

Capabilities vary across institutions:

• Specialized digital tools: Guidance from Capital One explains that its mobile app includes subscription management features that display which merchants hold a Capital One card for recurring payments, allowing cardholders to block future charges or cancel automatic payments from select merchants on Capital One credit cards.
• Issuer stop-payment orders: Banner Bank notes that while it cannot selectively remove a single merchant from receiving updater data through the network updater itself, cardholders can request a formal stop-payment order to block future authorizations and payments from a specific merchant, subject to the bank's published stop-payment fee.

Ask your issuer's customer service department: "Can you place a merchant-level block on future authorizations from this specific merchant on my card?"

3. Exercise Regulation E stop-payment rights on bank accounts

Regulation E covers electronic fund transfers from a consumer deposit account. It does not cover credit-card charges.

Under 12 CFR 1005.10(c), you may stop a preauthorized electronic fund transfer from your account by notifying the bank orally or in writing at least three business days before the scheduled date. If you give oral notice, the bank may require written confirmation within 14 days. The bank must tell you about that requirement and where to send the confirmation. An oral order stops being binding after 14 days if the written confirmation does not arrive. Under 12 CFR 1005.10(b), that kind of transfer may be authorized only by a writing signed or similarly authenticated by you, and the person who obtains the authorization must give you a copy.

The current CFPB page on stopping automatic bank payments does not restate the three-day number. The timing above is the regulation. On that page, CFPB says to call and write the company to revoke permission, then call and write the bank and say you revoked it. After you have told both, CFPB says any additional payments the company initiates are errors, and you can ask the bank for a refund. Tell the bank promptly. Some banks also suggest a stop-payment order, and they generally charge a fee for it.

A repeating debit-card charge can be both a card-network credential and a preauthorized transfer from your checking account. The updater can migrate the card number, and the Regulation E stop-payment right can still apply to the deposit-account debit. A credit-card subscription is outside Regulation E. Ask the bank which form it wants: a stop-payment on the deposit account, a merchant block on the card, or both. Banner Bank's card page describes a fee-based stop-payment that blocks future authorizations from a named merchant, and says the bank cannot stop that merchant from receiving updater data itself.

4. Dispute unauthorized or post-cancellation charges

Card networks and federal laws establish dispute procedures for specific billing violations. Disputing a transaction through your card issuer is appropriate when:

1. You canceled with documentation, but charges continued: If you have an email confirmation, a cancellation reference number, or a certified letter confirming cancellation, and the merchant billed you anyway, that transaction is a legitimate billing error. Follow the procedures in the credit card chargeback guide to submit your documentation.
2. You never authorized the subscription: If you never enrolled and never gave billing consent, the charge is unauthorized. The Federal Trade Commission's consumer guidance says to dispute it with the card company online or by calling the number on the card, follow up in writing to the address listed for billing disputes or errors, and report it at ReportFraud.ftc.gov or to your state attorney general.

Step-by-step: how to stop unwanted recurring charges

Cancel with the merchant first, then add the issuer step that matches the payment rail. None of these steps erases a balance you still owe.

[Step 1: Cancel with Merchant]
       │ (Save timestamped proof)
       ▼
[Step 2: Revoke Billing Authorization]
       │ (Send written notice to company)
       ▼
[Step 3: Review Wallet & Token Links]
       │ (Audit recurring digital credentials)
       ▼
[Step 4: Contact Card Issuer]
       │ (Request merchant block or updater opt-out)
       ▼
[Step 5: Dispute Post-Cancellation Bills]
       │ (Use documentation if charges reappear)
       ▼
[Check the next statement]

Step 1: Cancel directly with the merchant

Never use a replaced card as a proxy for cancellation. Log into the merchant's online portal, use their documented cancellation workflow, or submit a formal cancellation request in accordance with their terms of service. For comprehensive techniques on navigating difficult cancellation barriers, consult the cancel any subscription guide.

Capture verifiable proof before leaving the screen:

• Screenshot the final cancellation confirmation page showing the date, time, and account identifier.
• Save the cancellation confirmation email and record any cancellation reference number.
• If canceling by phone, note the date, time, representative name, and call duration. If canceling by mail, send via certified mail with return receipt requested.

For an overview of your baseline legal rights when dealing with subscription renewals, review the click-to-cancel subscription rights guide.

Step 2: Revoke payment authorization in writing

If the charge is an automatic debit from a bank account, revoke the company's permission in writing and keep a copy. The CFPB's sample letter to the company tells the company to stop automatic payments from the bank account and states that you are revoking authorization for electronic funds transfers. The sample lets you apply that revocation to all future debits or only to the next scheduled debit. It asks for your account number with the company. Do not put the full bank account number in the letter. Call the company as well, then send the letter and keep a copy.

That letter is for bank-account debits. It is not a credit-card network form, and it does not by itself cancel a service contract. Use the merchant's cancellation process for the subscription, and use the letter to revoke the debit.

Step 3: Audit digital wallets and merchant tokens

If you subscribed using Apple Pay, Google Pay, or PayPal, the billing relationship may be anchored to a specialized merchant token rather than your physical card number.

Apple's merchant-token documentation says a merchant token for recurring web and in-app payments is unaffected if the underlying card is reissued because it expired or was lost or stolen. Deleting that token in Wallet invalidates it for future charges. Apple says the deletion does not cancel the subscription or service. Using Wallet's revoke-payment control also does not end the contract. Apple says that action can prompt the merchant to start a payment-recovery process. For how a digital-wallet number can differ from the plastic on a refund receipt, read the Apple Pay refund card number mismatch guide. PayPal automatic billing agreements use a separate authorization. The payment app refunds guide covers that rail.

If you suspect you have multiple forgotten subscriptions draining your accounts, conduct a systematic review using the zombie subscription audit guide. If you enrolled in a promotional offer, ensure you take action before billing begins by checking the free trial cancellation guide.

Step 4: Engage issuer defenses if the merchant resists

If the merchant refuses to cancel or you cannot reach them:

1. Call the customer service number on the back of your card.
2. Provide the date and proof of your cancellation request.
3. Inquire about issuer-specific controls:
   • Can the issuer place a merchant-specific block on future authorizations?
   • Does the issuer support opting out of the network account updater?
   • If the charge is a preauthorized debit from a deposit account, including ACH or a repeating debit-card pull, use the Regulation E stop-payment right at least three business days before the transfer date. Credit-card charges are outside that rule.

Step 5: Dispute any charges billed after cancellation

If a merchant bills your reissued card after you have submitted a valid cancellation and revoked authorization:

1. Initiate a formal billing dispute with your card issuer.
2. Submit your proof: the timestamped cancellation screenshot, confirmation email, cancellation number, or written revocation notice.
3. The issuer will reverse the charge conditionally and initiate a formal chargeback inquiry through the card network.

A worked example: how charges split across a reissued card

To illustrate how network updaters behave in practice, consider this hypothetical scenario:

A consumer experiences debit card fraud after a gas station skimmer compromises their card. Their bank cancels the physical card (ending in 4112) and mails a replacement card (ending in 8905). The consumer has three recurring subscriptions previously tied to the old card:

1. National Video Streaming Service ($19.99/mo): Enrolled in Visa Account Updater.
2. Regional Health Club ($65.00/mo): Enrolled in Mastercard/Visa Account Updater.
3. Local Community News Subscription ($8.00/mo): A small local publisher using an older payment gateway with no account updater integration.

Here is how each charge behaves over the next 45 days:

• The Streaming Service: On the next billing date, the streaming platform queries VAU, receives the updated 8905 credentials, and charges the new card seamlessly. The consumer sees $19.99 billed to their new card statement. Because the consumer wants this service, the updater saved them the hassle of re-entering payment info.
• The Health Club: The consumer stopped attending this gym six months ago and assumed the canceled card would end the membership. On the first of the month, the gym's billing service queries the updater, receives 8905, and bills $65.00 to the new card. The consumer is furious, believing the charge is fraudulent. However, because the consumer never executed a formal membership cancellation, the gym has standing authorization. The bank will not treat this as fraud. To stop it, the consumer must execute a formal cancellation with the gym.
• The Local Newspaper: On its billing cycle, the local publisher attempts to bill the old 4112 card. Because the publisher does not use an updater, the charge on the old number is declined. The publisher sends an email stating: "Your payment failed. Please update your billing information within 10 days to avoid a $15 late fee and service cancellation." The 10 days and the $15 are part of this illustration, not a fee taken from a real publisher.

The example is the updater's actual scope: a data exchange between participating businesses and card networks, with a gap wherever a merchant is not enrolled.

Frequently asked questions

Will closing the card account stop the subscription for good?

It stops that card charge, not the debt. Visa's FAQ says a merchant inquiry can come back as a closed-account advice rather than a new card number. Bank of America tells its merchants to contact the customer for new billing information when the account is fully closed. CFPB says cancelling the automatic payment does not cancel what you owe, and that you should also cancel the contract with the company. Close the card if it was compromised. Cancel the subscription if you want the bills to end.

Can I opt out of account updater services?

Possibly, depending on your card issuer. Disclosures from institutions like Citadel and Banner Bank confirm that cardholders can request to opt out of Mastercard Automatic Billing Updater via online banking, mobile banking, by phone, or at a local branch. Visa developer documentation does not outline a cardholder-facing opt-out interface, and policies vary widely among large national banks. Contact your card issuer directly to ask if they support updater opt-outs. Remember that opting out means you must manually update every recurring bill you wish to keep whenever your card is reissued.

Why did my gym membership survive a fraud replacement?

Because lost or stolen replacement is a supported updater event, and the service does not filter out merchants you no longer want. Visa lists lost or stolen card replacement among the changes it supports. Banner Bank's FAQ contemplates fraudulent recurring payments receiving the new card information, and it tells cardholders to opt out if they do not want that. A membership you authorized can move to the new card. A charge you never authorized can move too, if that merchant already had a recurring relationship and participates. Dispute the charges you never agreed to, and cancel the membership you did agree to.

Does this happen with debit cards too?

Yes, on the card-network side. Banner Bank and Citadel say their debit and credit cards are automatically enrolled in Mastercard Automatic Billing Updater. If the merchant bills the 16-digit debit card number, a participating updater can supply the new number the same way it does for a credit card.

The stop-payment right is separate. Regulation E, at 12 CFR 1005.10(c), covers preauthorized electronic fund transfers from a consumer deposit account. That includes an ACH debit that uses your routing and account number, and it can include a repeating debit-card charge that pulls from the same account. It does not include a credit-card charge. Notify the bank at least three business days before the scheduled transfer, and send written confirmation within 14 days if the bank requires it. A pure ACH debit has no card number for an updater to change.

Can I block one merchant without closing the card?

Sometimes, and only in the way that issuer offers. Banner Bank says it cannot stop one merchant from receiving updater data, but a cardholder can request a stop-payment on future authorizations from that merchant at the bank's published fee. Capital One says its mobile app can show which services use a Capital One credit card for recurring payments and can block future charges or cancel automatic payments from select merchants, for Capital One credit cards only. Ask your own issuer what it can block.

Should I dispute the charge with my bank?

Only if you have legitimate grounds. You should dispute a charge if you canceled the subscription according to the merchant's contract and have timestamped proof, or if you never authorized the subscription at any point. The FTC advises disputing unauthorized subscriptions immediately and reporting them at ReportFraud.ftc.gov. However, if you knowingly signed up for a subscription and hoped a replacement card would stop the billing without canceling, the charge is not a bank billing error. The issuer can reject that dispute when the merchant shows the agreement.

Official sources and limits

Verified on October 1, 2026:

• Visa Developer Center: Visa Account Updater (VAU). Network documentation for the data exchanged and the supported account changes, including renewal, replacement, upgrades, portfolio moves, lost or stolen replacement, closures, and conversions to Visa.
• Visa Account Updater FAQ. Inquiry model, closed-account and contact-cardholder advices, and the two-business-day acquirer forwarding rule.
• Discover Network Account Updater merchant guide (2026). Discover's own description of merchant inquiries for recurring and stored card-on-file accounts.
• Cornell Legal Information Institute: 12 CFR 1005.10. Regulation E text for preauthorized transfers, including the signed-or-similarly-authenticated authorization rule in 1005.10(b) and the three-business-day stop-payment rule in 1005.10(c).
• Consumer Financial Protection Bureau (CFPB): How do I stop automatic payments from my bank account?. Revoke with the company and the bank, treat later company-initiated payments as errors, and the statement that cancelling an automatic payment does not cancel what you owe. This page does not restate the three-day stop-payment clock.
• CFPB sample letter to a company. Sample revocation for automatic bank-account debits, with a choice of all future debits or only the next one.
• Banner Bank: Mastercard Automatic Billing Updater. Automatic enrollment of its credit and debit cards, participating-merchant limit, unknown merchant list, phone or branch opt-out, stop-payment at the published fee, and the opt-out path for fraudulent recurring payments.
• Citadel Federal Credit Union: Mastercard Automatic Billing Updater. Free automatic enrollment, updates for expired and lost or stolen cards, online and mobile banking opt-out, and late fees when an update fails.
• Bank of America Merchant Services: Account Updater. One acquirer's token-harvest schedule: expired tokens monthly, American Express tokens daily, and a report when the account is fully closed.
• Recurly: Account updater. Merchant-platform rules for American Express Card Refresher, including a direct SE number and a US business location. Not an Amex consumer page.
• Capital One: How to Stop Automatic Payments. App tools that can block or cancel select merchants on Capital One credit cards, and the warning that closing a card may not stop payments the merchant was already authorized to take.
• Apple Developer: Merchant Tokens (MPANs). Merchant tokens for recurring web and in-app payments stay usable after expiration or a lost or stolen reissue. Deleting one invalidates future charges and does not cancel the subscription.
• Federal Trade Commission (FTC): How to stop subscriptions you never ordered. Dispute steps for a subscription you did not agree to, written follow-up to the billing-disputes address, and reporting at ReportFraud.ftc.gov.
• U.S. Bank: Knowledge Base Article KB0283845. On an upgrade, the card number most likely stays the same. A new expiration date or CVV is possible, not guaranteed. If the information changes, the customer updates merchants and the digital wallet.

This article provides educational consumer information and does not constitute formal legal, banking, or financial advice. Cardholder agreements, network operating rules, and merchant terms of service govern individual account liabilities. To stop recurring charges, always initiate formal cancellation with the merchant first. If you experience unauthorized billing, contact your card issuer using the phone number printed on the back of your card or accessible within your secure banking application. Do not transmit complete payment card numbers or sensitive account credentials to this website.