It's totally not a "greyhat" technique

First method consist of use of stolen Spotify members
And the second one is to do a payment with a stollen credit card


So it's totally illegal and not "greyhat" like you said

Need a refund or i'll do a refund dispute