We have a situation where my wife joined a health club, paid the joining fee and first payment with her debit card, and then signed a D/D agreement for the subsequent payments. The club was crap so under the terms she cancelled after 3 months and cancelled the D/D after the final payment. Club claim to have not received the cancellation (hand delivered) and then proceeded to take money using the debit card details from the initial transaction. Lloyds TSB say "not our problem how do we know whether it was an ongoing transaction or not"
The wider issue here is what is to stop anyone who has ever had your card details taking further money from your account. We have chip & pin, security digits, signatures etc and someone can still sail past them all it seems. It seems that there is not even any guarantee like there is with the D/D scheme.
Am I just being paranoid here or is this a potentially serious issue?