If Auto Renewal is active, renewal is processed using the most recent token held by the system.
You can disable auto-renewal at any time, but it must be turned off at least 14 days before the expiration date (that’s when auto-renewal is initiated).
Visual tip: Add a callout image or banner near your renewal settings reminding users: “Disable auto-renewal 14+ days before expiration.”