I don't know about the legality, but it is certainly common place over here even with periodicals that seem reputable (I recently cancelled New Scientist: sign-up was done easily any time online, cancellation has to be done by phone call inside office hours).