Hi everyone,

My project (team bluntlyph) has been hit by abusive automated traffic twice, and it has run up usage charges I didn’t expect.

Latest incident: Nov 3, 2026, ~08:15–16:15 UTC

~4.2M requests in ~8 hours, peaking at ~310k requests per 15 minutes User agent node, from AWS Singapore IPs Almost entirely hitting search and API endpoints; the homepage got only a few hundred requests ~57 GB of Fast Origin Transfer in under a day No deployment that day, so this wasn’t caused by a code change

Earlier incident: mid-October 2026. A similar spike led to a ~$100 partial invoice, which I paid.

I’m a small project. I’ve since downgraded to Hobby, and my latest invoice is about $241, which includes Pro plan and seat charges for a period I’m no longer on Pro.

What I’ve done so far:

Opened a support case (Invoice Enquiry) via the support chat The Security → Firewall category isn’t available to Hobby teams, so I couldn’t file under that

My questions:

Has anyone gotten a billing adjustment for abusive or bot traffic like this? What worked? Is there a better way to make sure a human on the billing team reviews my case? Would a Vercel staff member be able to take a look?

I’m happy to share screenshots of the Firewall traffic breakdown and usage charts privately with staff.

Thanks!