I’ve been using stripe for about a decade on my small SaaS. This is extremely common, and all those custom rules are familiar. Stripe has the tools to deal with it, but you must configure it. I wouldn’t fault stripe as much as the training/docs on setting up a stripe account should include how to protect yourself from these. We’ve managed to get it down to a few fraudulent refunds per week. It’s still a big time sink. We have to implement all sorts of pre-fraud triggers within our app to try to catch them as early as possible. And review recent subscriptions daily. This seems to be the nature of the beast. A cost of doing business is losing card disputes.