Unauthorized AI Gateway credit purchases - manual refund requested (Ticket: 01d14EiL4Dls9pih)

Help
,
1

My Vercel account appears to have been compromised, and I received two invoices for AI Gateway Credits that I did not purchase or authorize:

  • $514.80 — $500 in AI Gateway Credits plus processing fee
  • $1,029.30 — $1,000 in AI Gateway Credits plus processing fee

The total unauthorized amount is $1,544.10.

As soon as I noticed the charges, I downgraded my account and removed my payment method through Link. I also double-checked that automatic credit top-ups are disabled. The approximately 1,505 credits currently showing in my account remain completely unused.

I attempted to request refunds through the automated refund form, but received a message saying that the automatic refund limit had been reached and that support could not override it through that process. A support case has now been opened:

Support ticket: 01d14EiL4Dls9pih

I am requesting:

  1. A manual refund for both unauthorized invoices.
  2. An investigation into the suspected unauthorized access to my account.
  3. Confirmation that the unused credits will not prevent the refund from being processed.

I have not used the purchased credits and am ready to provide any additional verification required. I would appreciate assistance from the Vercel team as soon as possible.

2

Thank you for bringing this to our attention. To ensure this is investigated with the necessary priority and privacy, please report all security-related concerns, potential exploits, or abuse directly to the Vercel Security Team.

Please submit your report here: Report Abuse On Vercel

Reporting via this official channel is the fastest way to reach our security engineers and ensures that sensitive information is handled in a secure environment rather than a public forum.

3

I got a response that my 2 invoices will be refunded but I only got 1 refund invoice the other is still in paid status while the whole 1500 creds were removed so can someone from support help me expedite this bcs the support ticket got auto closed after there response
I did create a follow up case : 0147h2jnlrddNrGY

original case id : 01d14EiL4Dls9pih