On April 9, 2010, a "Preauthorized Debit" appeared on my checking statement in the amount of $18.99. The memo field shows "HTHSVRAPR 8007432584", which of course is "HealthSaver, provided by Trilegiant Corporation" (taken directly from their web site).
This was an ACH (Automatic Clearing House) transaction, and my bank, RBS Citizens Bank, reports that this was neither a debit card nor a check, but solely an electronic transfer. Though the dollar value isn't great, this is scary because there's no "check & balance" system in place for ACH transactions.
For example, the last digit of every credit/debit card is a "check-sum" that is calculated from all of the preceding digits of your real card number. If a credit card number is entered (manually) wrong, there is a 9-out-of-10 chance that it will fail the check-sum test. However, there isn't any check-sum for ACH transactions. [continued below]....
Based on the number of reports regarding Trilegiant, it appears that they are either back in the business of ripping people off, or have dodged every complaint thus far and still up to their same tactics.
In my case, their fraudulent withdrawal drove my account negative, which forced an "Insufficient Funds Fee". I'm fighting it with the bank and have to wait several days for the result. Meanwhile, I can't pay my cable bill because HealthSaver's charge plus the overdraft fee doesn't leave enough in the account.
As stated by someone else, *fight this* with your bank, and don't accept any "Stop Payment" fees or such; the bank is not entitled to charge you for this as this is not a check you've written. You must complain, and then complain some more.