What to do if…
you see new app subscriptions or in-app purchases you did not start
Short answer
Stop more charges first: cancel the subscription(s) in your App Store/Google Play account, then contact your bank/card provider promptly if you didn’t authorise the payments.
Do not do these things
- Don’t ignore “small” charges — they’re often test payments before larger ones.
- Don’t uninstall/delete the app to “stop billing” — subscriptions usually keep running until you cancel them in your account.
- Don’t delete emails/receipts or screenshots yet — you may need order details to identify the merchant and request refunds.
- Don’t click “refund” links in texts/emails that could be phishing — use your device settings or the official Apple/Google refund pages.
- Don’t assume it’s definitely “hacking” — it can also be Family Sharing, another device signed in to your account, or carrier billing.
- Don’t keep using the same password if you suspect account compromise.
What to do now
- Capture the evidence (2 minutes): screenshot the subscription list and purchase/order history; note app/service name, amounts, dates, and any order IDs.
- Confirm what the charge is labelled as on your statement/bill: for Apple charges, it may show as something like “apple.com/bill”. For Google, it may show as “Google Play”. This helps you dispute the right thing in the right place.
- Cancel the subscription so it can’t renew.
- iPhone/iPad: Settings → your name → Subscriptions → select anything you didn’t start → Cancel Subscription.
- Android: Google Play app → profile icon → Payments & subscriptions → Subscriptions → cancel anything you didn’t start.
- Request refunds through the platform right away.
- Apple: request a refund via reportaproblem.apple.com (choose “Request a refund”).
- Google Play: use Google Play’s refund request flow (and, if needed, contact the developer from the Play listing).
- Secure the account that was used (Apple Account / Google account).
- Change the password (use a new, unique one).
- Turn on two-factor authentication.
- Review devices signed in and sign out anything you don’t recognise.
- If you use Family Sharing or shared devices: check whether a family member’s device could have approved the purchase.
- If a bank card, PayPal, or your mobile bill was charged, contact the provider.
- Tell them these are unauthorised payments and ask what they need from you (they may advise replacing the card, blocking the merchant/recurring payments, or starting a dispute).
- If it’s carrier billing (charges on your phone bill), contact your mobile network, dispute the charge, and ask if they can block/disable third-party/premium billing to prevent repeats.
- If you believe it’s fraud/cyber crime, report it to the police reporting service.
- In the UK (England/Wales/Northern Ireland), reporting is via Report Fraud (the police service for fraud and cyber crime reporting).
- If you’re in Scotland, fraud is typically reported to Police Scotland (e.g., via 101 for non-emergency reporting).
- Write down what you changed and what’s pending: subscriptions cancelled (which), refund requests submitted (which), passwords changed (which), 2FA on (yes/no), and any bank/mobile case reference.
What can wait
- You don’t need to figure out how it happened right now.
- You don’t need to confront a family member or housemate immediately — confirm purchase history first.
- You don’t need to wipe your phone or factory reset unless trusted support later advises it after you’ve secured accounts and payment methods.
Important reassurance
This happens to careful people. The useful first move is boring but effective: stop renewals, secure the account, and get the payment provider involved.
Scope note
These are first steps to stop loss and reduce damage. If the charges continue after you cancel and secure the account, you may need follow-up help from Apple/Google support and your bank’s fraud team.
Important note
This is general information, not legal or financial advice. Processes and eligibility for refunds can vary by provider and circumstances. If you feel overwhelmed, focus on the sequence: cancel → refund request → secure account → contact bank/mobile provider.
Additional Resources
- https://support.apple.com/en-gb/118428
- https://support.apple.com/en-gb/118223
- https://support.apple.com/en-gb/120164
- https://support.google.com/googlepay/answer/7644008?hl=en-GB
- https://www.gov.uk/government/news/report-fraud-new-service-from-city-of-london-police
- https://www.reportfraud.police.uk/guide-to-reporting/
- https://stopthinkfraud.campaign.gov.uk/reporting-fraud/