They will just take your money and not activate your account.
You can’t contact them securely, because their only support contact is email but the PGP key on their website is corrupted (you can’t re-wrap the lines of a PGP key!) and even after fixing the corruption it turns out that they forgot to publish their encryption key (the published key is signing-only).
So there’s no secure way to contact them.
Total waste of my time and money. This is why everybody uses Mullvad.
I had a positive experience using xmr. But I contacted them about their crappy pgp key months ago, they did nothing. I contacted them about many websites not being accessible from some of their servers, they did nothing.