In message , at 15:00:40 on
Tue, 9 Sep 2014, Paul Corfield remarked:
The idea of somehow recording card holder name, card number and expiry
date and then restrospectively applying some sort of charge to the
account doesn't feel feasible to me. I can't think of a situation,
other than via crime / fraud, where charges can be made to a bank
account without the account holder having authorised this (at the time
of transaction or granting authority to the bank when starting the
account in respect of any charges / penalties they can levy).

The T&C posted earlier specifically allow that (assuming that T&C that
weren't brought to your specific attention have any force in law).

3.1 When you touch your contactless payment card on a yellow
card reader, or a portable card reader held by staff, you are
authorising TfL to charge the cost of your journey, including
any unpaid fares, to your card account.
--
Roland Perry