Can vpns steal accounts, obtain credit card details?
Short answer: no
Long answer:
Yes bad actors could install a proxy and install a local certificate that would allow data to be decrypted before being sent over a tunnel.
Does this happen?
Yes, corporate environments do this so they can better filter traffic on their networks. They might have a policy to not decrypt a list of banks and various other sites.
Does this happen with major vps providers?
Yes, Facebook acquired Onavo which did this. They used the data to acquire up and coming social networks which is why so few social networks bubbled up to compete with Facebook.
Ok can this happen with other VPN providers?
Yes
Check: Trust manually installed certificate profiles in iOS, iPadOS and visionOS - Apple Support (IE)
Android: Weiterleitungshinweis (settings> security>more security settings> encryption and credentials>user credentials).
If you use some really good industry VPN providers than this is not the case
nope, unless they are not a “real” vpn…any of the main brands wouldnt ever do that
What are you even asking?