My nephew and some friends - for a laugh -visited some adult porn sites on the internet (OK - bad thing to do but it happens. ) Like a fool, he gave his credit card details to access a site. They had had a few drinks and he forgot about it. When he realised his account was being debited, he instructed his credit card company to cancel the payments. They tell him that they can't legally do this: that he must do it himself. He can't even remember where the site was - has certainly not accessed it since (it's honestly not something he would normally do.) Whoever is debiting his account is hidden behind the term "IAA*72 Internet Access". He told his credit card company that if they wouldn't cancel the payments, he would cancel his credit card, but they say they will still be obliged to pay, and that he will be obliged to pay them. Is this true? Also, how can he sort this out?