A consumer group, Which?, raises concerns about a card-related process that may unintentionally leave accounts vulnerable to fraud. The issue relates to what happens when a card is cancelled: where a customer’s payment details have previously been saved with a merchant, the underlying system may automatically update those stored card details rather than fully removing them. Which? says this “loophole” could allow fraudulent use if the cancellation process does not prevent updated details from being used on previously saved accounts. The concern focuses on how payments systems handle stored card credentials after cancellation, rather than on any single company. In response to the concerns, the underlying arrangements between card issuers, payment networks, and merchants determine whether saved payment methods are updated or disabled when a card is cancelled. The consumer group is urging scrutiny of the safeguards in place, arguing that consumers should be protected from scenarios where cancelled card details remain usable through automatic updating. The coverage notes the potential risk to customers, particularly in cases involving stolen cards or attempted misuse after cancellation.