That's what they mentioned in the initial email: "We recently identified payments on your Stripe account for Travely eSIM that don't appear to have been authorised by the customer, meaning that the owner of the card or bank account didn't consent to these payments.". I do have 3DS enabled + Strict Radar rules + custom backend to auto block fraud users + manual review and refund for suspicious payments. It is weired after investing in integration with Stripe and doing everything possible to have a good account that you get blocked without a notice.
This sounds like a market where there is a lot of normal fraud. Like these are real people using their own credit cards / banks to pay, but after they receive the product they claim they didn't purchase it and charge it back. I'm not sure how any of Stripe safeguards would protect you from that.
I received 10 fraud disputes during the first month, but that was eight months ago. After applying strict Stripe Radar rules and backend logic, I haven't received a single chargeback in the past seven months. It would've made more sense if they closed the account 8 months ago not today.
What surprised me is that the disputes were limited to the first month where stripe support agent recommended not to refund them because they might be legitimate.. The past 7 months have been clean after I fully optimized Radar rules.