I had the same thing happen!
I bought a domain a long while back, it auto-renewed and charged me more than $500 for 1 year. I've never used the domain properly and would have just let it lapse, they did warn me of the pending auto-renewal but I ignored it thinking it would cost $30 or something.
This was for a `.club` TLD.