A customer cancels a subscription on Friday. On Monday, your gateway charges the customer again because the billing job still has an active schedule. Customer support sees a cancellation email, accounting sees a successful payment, and the customer sees a business that ignored their request.
Subscription payment processing needs to connect those records. The legal landscape also requires care: an old article describing a nationwide federal click-to-cancel mandate may no longer describe the law. This guide separates the current federal position from one important state example, then translates the distinction into operating questions.
Scope and date: U.S. consumer subscription operations, checked September 21, 2026; California is discussed specifically. This is general operational education. Have counsel assess the laws covering your customers, offers and sales channels.
The federal click-to-cancel rule changed status
The Eighth Circuit vacated the FTC's 2024 amended Negative Option Rule on July 8, 2025. In February 2026, the FTC restored the earlier rule text. That means businesses should not describe the vacated 2024 amendments as a currently enforceable, nationwide click-to-cancel rule. See the court's decision and the FTC's February 2026 rule action.
The FTC then opened a new advance notice of proposed rulemaking in March 2026. An advance notice requests input; it does not itself create replacement cancellation requirements. The FTC's current rule page identifies that proceeding. Review its status again before publishing a future policy update.
Vacatur did not erase other subscription obligations. Section 4 of the Restore Online Shoppers' Confidence Act, or ROSCA, covers online transactions using a negative-option feature. It requires clear disclosure of material terms before obtaining billing information, express informed consent before charging, and a simple mechanism to stop recurring charges. See the enacted ROSCA text. Treat enrollment, consent and cancellation as one connected workflow.
California adds requirements that deserve their own review
California's AB 2863 amendments apply to covered contracts entered into, amended or extended on or after July 1, 2025. They address express affirmative consent, consent verification, cancellation and notices. Verification must be retained for at least three years or one year after termination, whichever is longer. Covered fee changes require notice seven to thirty days before taking effect. Those are California provisions, not universal federal time periods. See AB 2863's enacted text.
For covered online enrollment, California requires online termination without steps that obstruct or delay immediate cancellation. The statute also addresses cancellation through the medium used to activate the service and annual reminders. Businesses should have counsel map the relevant provisions and exceptions to their plans. The California attorney general's September 2025 explanation provides a useful owner-level starting point.
Operationally, one generic renewal email cannot be assumed to satisfy every applicable notice. A monthly plan, annual plan, discounted introductory period and later price change can produce different events. Name those events in your system instead of treating them all as “subscription updated.”
Save the agreement the customer actually accepted
A current terms page does not show what a customer saw six months ago. As an operating practice, preserve a versioned record of the offer: price, frequency, trial conversion, cancellation instructions and the customer action indicating acceptance.
Connect the offer version to the subscription identifier. Keep the timestamp, source channel and relevant consent evidence available to authorized staff. Avoid putting full card details into screenshots or customer-service notes. Your support team usually needs an order reference and masked payment details, not a second store of payment credentials.
Test whether a staff member can answer a concrete question: “What did this customer agree to before their first recurring charge?” If the answer requires guessing from today's website, the record needs work.
Make cancellation a billing event
Document which system owns the subscription state. A CRM task marked closed is not necessarily a cancelled gateway schedule. A cancelled schedule may still leave an already submitted transaction requiring separate review.
Use explicit states such as active, cancellation requested, cancellation effective and refund pending, with meanings approved for your operation. Record when future charges stop and what happens to already paid service time. Send a confirmation that accurately reflects the result; do not tell the customer billing has stopped while a downstream update remains unconfirmed.
Test cancellation immediately before a renewal, during a failed-payment retry and after a plan change. Check both the customer screen and the processor record. These tests reveal handoff failures that a successful signup demonstration misses.
Review retention offers and payment retries
A discount can be a useful choice for a customer who wants it. It should not cause your system to lose the original cancellation instruction or silently restart billing. Make acceptance of a different plan a distinct event with its own terms.
Similarly, distinguish a declined payment from a cancelled subscription. Retrying an active, authorized obligation is a different operating situation from retrying after cancellation has taken effect. Have your provider and counsel review how those events are handled. Technical retry capability does not establish permission to charge.
Track complaints by cause: unclear trial, unrecognized descriptor, cancellation failure, pricing confusion or service dissatisfaction. That produces a more useful improvement list than a single monthly dispute total.
An owner's subscription billing checklist
- Inventory every offer, channel, trial and renewal interval.
- Map federal and applicable state requirements with counsel.
- Save the terms and consent evidence associated with each enrollment.
- Assign responsibility for each required notice and verify delivery records.
- Test cancellation through the customer-facing channels you offer.
- Confirm that cancellations reach the actual billing schedule.
- Review retries, refunds and customer communications together.
- Ask providers how they evaluate your recurring-payment model and records.
Questions subscription owners ask
Does the federal vacatur mean cancellation can be difficult again?
No. ROSCA still imposes requirements for covered online negative-option transactions, and applicable state laws can impose additional duties. Review the actual customer journey against those obligations rather than relying on a headline.
Is a checkbox enough proof of consent?
A checkbox alone does not tell you which terms were displayed, whether the wording was clear or what event it authorized. Preserve the complete relevant enrollment context and obtain advice on the applicable standard.
Can a gateway handle compliance for us?
A gateway may offer scheduling and cancellation functions. Your business still needs accurate offers, appropriate consent, required notices and reliable connections between systems. Confirm responsibilities with each provider.
Bring the cancellation journey to the payment conversation
A useful consultation includes a sample offer, the enrollment screens, cancellation steps and the systems that maintain billing state. Stratamize can help map those handoffs and scope practical integration work for subscription payment processing. Provider eligibility and underwriting vary. Book with Joseph to discuss your operating model and where customers or staff encounter friction.