On 2025-07-08, the Eighth Circuit vacated the FTC's "click-to-cancel" rule in its entirety, days before merchants were due to comply with it. The agency restarted rulemaking in March 2026, but as of this fall no replacement rule had shipped. So when a $14.99 renewal lands on your statement for a free trial you forgot about, there's no federal one-click cancellation right to lean on. You're choosing between emailing the merchant and tapping "dispute" in your banking app, and the two paths produce very different outcomes.
Ask the merchant first, almost every time
Card-network rules generally expect you to have tried the merchant before you file a dispute, and an issuer can deny the claim if the merchant shows you skipped that step. That's not just etiquette — it changes your odds. Visa's reason code 13.2 ("Canceled Recurring Transaction") was rewritten specifically so a cardholder can't win just by saying "I think I cancelled." The issuer now has to supply the actual cancellation date and method, which means the evidence burden falls back on you before it ever reaches the bank.
There's a second reason to try the merchant first: refunds and chargebacks aren't interchangeable. A refund is the merchant voluntarily reversing the charge. A dispute is you asking your bank to claw the money back from the merchant, and it carries a dispute fee the merchant eats regardless of who wins. Apple's own refund process makes the distinction concrete — cancelling a subscription in Settings doesn't reverse a renewal that already posted; you have to separately submit a request at reportaproblem.apple.com and wait roughly 24-48 hours for a case-by-case review. If you cancelled a trial without checking the merchant's actual cancellation confirmation step, as in how to cancel a free trial before it charges you, the renewal that follows is often a process gap, not fraud, and the merchant can usually fix it faster than a bank can.
When the bank is the right call instead
The calculus flips in three situations. First, the charge is genuinely unauthorized — not "I forgot to cancel" but "I never had this merchant on file." Under Regulation E, reporting an unauthorized electronic transfer within 60 days of the statement date keeps your liability capped, and the Consumer Financial Protection Bureau's rules give your bank 10 business days to investigate or issue provisional credit, with a full resolution due within 45 days. Credit cards get a parallel protection: the Fair Credit Billing Act gives you 60 days from the statement date to send a written billing-error notice, and the CFPB says the issuer must acknowledge it within 30 days and can't demand payment while it investigates.
Second, the merchant is unreachable or stonewalling — no support address, no response after a documented attempt, or a flat refusal despite you having proof you cancelled on time. Third, you're in the UK and the purchase qualifies for Section 75 of the Consumer Credit Act, which only covers credit cards on purchases between £100.01 and £30,000 but makes the issuer jointly liable with the merchant — a stronger legal right than chargeback, which is a card-scheme courtesy, not a statute, available on debit or credit with no minimum and roughly a 120-day window. In the EU, PSD2 Article 73 covers unauthorized transactions specifically — your payment provider has to refund you by the end of the next business day — but it doesn't reach an authorized renewal you simply forgot about; that's still a card-scheme dispute, not a statutory one.
What evidence actually moves the dispute
If you do escalate, the dispute lives or dies on documentation, not on how annoyed you are. For Visa's 13.2 and Mastercard's equivalent code 4853, the merchant can defend the charge with proof you kept using the service after you say you cancelled, or proof your cancellation missed the contract's notice terms. That cuts both ways: if you have a timestamped cancellation email, a screenshot of the confirmation screen, or a support ticket number, you're handing the bank exactly what it needs to rule for you fast. If you have nothing but a vague memory of clicking cancel "a while back," you're asking the issuer to take your word over the merchant's transaction log.
This is where the numbers get uncomfortable. Chargebacks911's 2026 field report found merchants self-report "friendly fraud" — disputes filed against legitimate charges — at 43.8% of their chargeback losses, while the company's own transaction data puts the real share at 86%. Industry win-rate benchmarks put subscription businesses at a 60-70% success rate when they contest a dispute, well above the 20-30% they win against fraud claims. A documented cancellation flips that math in your favor; an undocumented one hands the merchant the better case. I don't read that as merchants running a shakedown — it's cardholders trusting a hazy memory of clicking something over a server log that timestamps every click, and the dispute process is built to side with whoever actually wrote it down.
I'd rather skip both paths entirely. A renewal reminder a few days before the bill, the kind Subnesio sends before a subscription charges, turns "dispute the charge" into "cancel before it posts." If your bank doesn't already flag these automatically, pulling a full year of statements once is still cheaper than fighting a chargeback you might lose.
Keep the cancellation email. The bank will ask for it eventually, and "I'm sure I clicked something" has never won a dispute.
