Unauthorized AI Gateway credit purchases

Hello,

My Vercel account appears to have been compromised, and I received two invoices for AI Gateway Credits that I did not purchase or authorize:

$576.58 — $500 in AI Gateway Credits plus processing fee and tax.

As soon as I noticed the charges, I downgraded my account. I also double-checked that automatic credit top-ups are disabled. The approximately 500 credits currently showing in my account remain completely unused.

A support case has now been opened: 01u4bl4P6lohkOUk

I am requesting:

A manual refund for unauthorized invoice.

An investigation into the suspected unauthorized access to my account. Confirmation that the unused credits will not prevent the refund from being processed. I have not used the purchased credits and am ready to provide any additional verification required. I would appreciate assistance from the Vercel team as soon as possible.

I did not authorize this purchase and am requesting a full refund. Please investigate and confirm:

When and how the purchase was initiated, including whether it was a manual purchase or an automatic recharge.

What account activity or setting triggered the charge.

Whether the purchased credits have been used.

Whether any pending purchases or automatic recharges could result in further charges.

Please preserve the relevant purchase and account access logs. Let me know if you need any invoices, transaction details, or screenshots from me.

Please prioritize this case and provide an update on the investigation and my refund request through this email thread.

Regards, sourabh chohan

Thank you for bringing this to our attention. To ensure this is investigated with the necessary priority and privacy, please report all security-related concerns, potential exploits, or abuse directly to the Vercel Security Team.

Please submit your report here: vercel.com/abuse

Reporting via this official channel is the fastest way to reach our security engineers and ensures that sensitive information is handled in a secure environment rather than a public forum.