Unauthorised account activity and credits bought. Trust & Security unresponsive.

Posting publicly because this has been open with support for weeks with no real resolution.

Two separate billing issues, same root cause:

AI Gateway: $600 in credits purchased (two same-day top-ups - $100, then $500, both July 10), fully consumed within days by $605.01 of usage across 1,517 requests. ~98% was Anthropic model calls consistent with the "Vercel Agent" Chat (Beta) feature, plus an unexplained ~$11 burst of video/TTS generation calls (Kling, Veo, xAI) in a single 3-hour window that doesn't match anything else on the account.
v0 Team: a v0 Seat + $500 in v0 Credits charged the same day (July 17) an unrecognized, never-deployed project appeared in my team that I did not create.

The reconnecting agent problem: I traced the AI Gateway usage to Team Settings → Agent → Chat (Beta), disabled it, and revoked the "Vercel Agent" OAuth connection. It reconnected on its own 48 minutes later. Disabled and revoked again - reconnected again 11 minutes after that. Whatever "disable" is supposed to do, it isn't sticking.

Also worth noting: while trying to lock this down, I was completely locked out of my account (GitHub SSO login failure + inaccessible 2FA), and separately, the platform attempted to charge $600 more in credits multiple times even after I froze my card.

This is not an isolated incident. I have noticed on here a similar pattern, different accounts:

Unauthorized AI Gateway credit purchases - manual refund requested
Auto charged when not enabled
How to request a refund for unexpected v0 Auto-Recharge credit charges
Lost credit - a user disabled auto top-up and lost their entire balance and project data; the only staff response after a week was "I'm not able to help with billing and credit issues from here."

Asking for:

A refund for undisclosed, uncapped charges on both pools.
An explanation for why disabling "Vercel Agent" doesn't stop it reconnecting.
An explanation of what created the unrecognized project.
An actual response from Trust & Security — the support queue has produced nothing.

Happy to share full usage logs/invoices with any Vercel staff who can action this.

While a member of our team prepares to jump in, you might find your answer even faster in our community resources.

Official Documentation: https://v0.app/docs
The v0 expert walkthrough: https://community.vercel.com/t/become-a-v0-expert/5981
Watch v0 in Action: https://community.vercel.com/live#v0

I had a similar issue funnily enough around the same date as this but in my case i was able to lock down my account in time and revoke everything in time to not let anyone use the creds and that helped with the refund procedure on my end, but this happening to so many people is absurd

I have locked down my account and frozen my card but its having a knock on effect with other subscriptions now. Vercel even had the cheek to contact me about failed payment for genuine subscription because of this despite being sat on the case for 2 weeks. Theres just so many different things happening and they seem to be shrugging their shoulders and not doing anything to help.

Good to see nobody from Vercel can even be bothered to respond to this. Absolute shambles of a company.

I'm checking with the trust and safety team to see why you haven't received an update.

it looks like you received refunds for your invoices within a few days of your case being opened. But please follow up with your case or let me know if you still have an issue.

I’ve received a refund for 2 of the transactions.

More importantly though I’m yet to receive any feedback over the cause or future prevention.