The providers are protected by the Visa / MasterCard guidelines, it feels like the VISA / MasterCard guidelines are above the law. As a consumer, you are screwed, the providers can launder money with almost no problems.
In Germany, credit card payments are particularly protected. Authorized transactions are only replaced under certain conditions. Banks very rarely refund such a secured transaction because the bank is liable if the opponent wins the chargeback. Therefore, the funds are usually not credited or the result of the chargeback is awaited.
If a transaction is not protected by 3DS, the merchant is liable. When I read that someone has authorized more than 40 transactions, it is clear why the banks are not reacting. Checking and complaining about 40 transactions in the MasterCard system is complex and time-consuming.
The banks believe that the payment is authorized; in addition, the person has received something in return, even if the card shows otherwise. There is no evidence in the form of invoices, so it is impossible to initiate a chargeback. From this point on, everyone should understand what this is about.





