What to do if…
you see app subscriptions or in-app purchases you did not start
Short answer
Stop more charges first: cancel any subscription you do not recognise in the account that is being billed, then report the charge through Apple or Google and contact your bank, card provider, PayPal, or mobile network if money has left your account or bill.
Do not do these things
- Don’t ignore small charges; they can still repeat or point to a problem with an account or payment method.
- Don’t just delete or uninstall the app; subscriptions usually keep running until they are cancelled in the billing account.
- Don’t delete receipts, emails, screenshots, or order numbers yet.
- Don’t click refund links in texts or emails; go through your device settings or the official Apple or Google Play help pages.
- Don’t assume it is definitely hacking; it can also be Family Sharing, a shared device, another signed-in account, or carrier billing.
- Don’t keep using the same password if you suspect someone else has access to the Apple Account or Google Account.
What to do now
- Capture the evidence first. Screenshot the subscription list, purchase history, receipt emails, phone bill entry, and bank or card statement entry. Note the app or service name, amount, date, order ID, and which account appears to have been used.
- Check what the charge is labelled as.
- Apple charges may appear as
apple.com/bill. - Google Play charges may appear as
GOOGLE*App developer name,GOOGLE*App name, orGOOGLE*Content type. - If the wording does not match Apple or Google’s usual formats, contact the payment provider directly.
- Apple charges may appear as
- Check the account that is being billed.
- For Apple, check the Apple Account shown on the receipt and check Family Sharing purchases if you are the family organiser.
- For Google Play, make sure you are signed in to the Google Account that has the subscription, and switch accounts if the subscription is not visible.
- If the charge is on a mobile bill, check whether carrier billing is enabled.
- Cancel any subscription you did not start.
- iPhone or iPad: Settings → your name → Subscriptions → select the subscription → Cancel Subscription.
- Android: open the Google Play app or Google Play subscriptions page while signed in to the Google Account that has the subscription → select the subscription → Cancel subscription → follow the instructions.
- If there is no cancel button or the subscription already shows as cancelled, write that down and move to refund and payment-provider steps.
- Request help or a refund through the platform.
- Apple: use
reportaproblem.apple.comto request a refund or identify the purchase. - Google Play: use the Google Play refund flow. If the purchase was not made by you or anyone you know, use Google Play’s route for charges you do not recognise. Google says it can usually only take action on credit card, debit card, or PayPal unauthorised transactions within 120 days, and on mobile operator billing transactions within 60 days.
- Apple: use
- Secure the account that was used.
- Change the Apple Account or Google Account password to a new, unique password.
- Turn on two-factor authentication if it is not already on.
- Review signed-in devices and sign out any you do not recognise.
- Check purchase approval, purchase verification, Family Sharing, parental controls, and shared-device settings where relevant.
- Contact the payment provider if money has left your account or bill.
- Contact your bank, card provider, PayPal, or mobile network using a known route, such as the number on the back of the card, the provider’s official website, the provider’s app, or 159 for many UK banks.
- Say these are payments you do not recognise and ask what they need from you. They may advise replacing the card, blocking a merchant or recurring payment, or starting a dispute.
- If it is carrier billing, ask the mobile network whether third-party or premium billing can be blocked or disabled.
- Report fraud if you believe this is fraud or cyber crime.
- In England, Wales, and Northern Ireland, report fraud and cyber crime through Report Fraud.
- In Scotland, report fraud and financial crime to Police Scotland by calling 101.
- Keep a simple record. Write down what you cancelled, refund requests submitted, passwords changed, two-factor authentication status, payment-provider reference numbers, and any fraud report reference.
What can wait
- You do not need to work out exactly how it happened right now.
- You do not need to confront a family member, child, housemate, or colleague until you have checked receipts, account history, and shared-device settings.
- You do not need to factory reset your phone unless trusted support later advises it.
- You do not need to decide today whether to keep using the app, platform, card, or mobile network after the immediate loss is contained.
Important reassurance
This can happen even when you are careful. The first useful moves are practical and small: stop renewal, preserve the order details, secure the account, and get the payment provider involved if money has gone.
Scope note
These are first steps only to stop further loss and reduce confusion. Later decisions about refunds, disputes, account recovery, police reporting, or complaints may need help from Apple, Google, your payment provider, your mobile network, or a specialist adviser.
Important note
This is general information, not legal, financial, technical, or professional advice. Refund eligibility, fraud reporting, chargebacks, and account-recovery processes can vary by provider and circumstances.
Additional Resources
- Apple Support — If you want to cancel a subscription from Apple
- Apple Support — Request a refund for apps or content you’ve bought from Apple
- Apple Support — Get help with charges from apple.com/bill
- Google — Cancel, pause or change a subscription on Google Play
- Google — Request a refund on Google Play
- Google — Report charges that you don't recognise
- Police.uk — Guide to reporting cyber crime & fraud
- Stop! Think Fraud — Reporting fraud
About this guide
This guide was produced and is maintained by PanicStation.org using its published editorial process. Official and specialist sources are checked where relevant, and AI-assisted tools may be used for drafting, organisation, and consistency checks. The site operator remains responsible for publication, revision, and removal decisions.