I had that with Europcar and asked to see the infringement notice. They said they had shredded it after telling the govt it was me driving, so they couldn't give it to me. All part of their GDPR compliance allegedly. So even consumer protection laws can be used to screw you.

The credit card being expired means nothing, you have to completely leave said bank. Direct debit arrangements are even worse in this regard (see also: gym memberships).