Exactly why CPA should be banned. At least with a Standing Order or Direct Debit you have the ability to cancel it, you can’t even see CPA’s you have set up.
As has been said they need to cancel directly via Microsoft.
What I do when these clowns ask for a valid card number I have a burner account with just £1 in it and use the card on that, then if they come back for more they are sadly let down.