Comment by evan_

> Apparently a basic sanity check like "Are we already billing this card?" is not implemented at all

They most likely don’t store your actual card number.