My Google account was hacked and I can’t log in. How can I disable the API keys so no costs occur? I can’t find any contact. I have no access to gmail , so I can’t use any Google support channels because all of them require me to be logged in. Please Help
I am incredibly sorry to hear that your account was compromised. Since you are worried about unauthorized API usage and potential billing costs, here is the official, critical action plan you need to follow immediately:
Secure Your Billing and Google Cloud Platform (GCP)
If your Google AI Studio API keys are attached to a paid Google Cloud Billing account, the fastest way to stop costs without logging in is to contact your bank or credit card provider immediately and temporarily freeze or block the payment method associated with that Google account. This prevents any automatic overage charges from API usage while you regain control.
Account Recovery Form (The Official Route)
Since you cannot access Gmail or log in, you must use the official Account Recovery tool from a device or location (IP address) you have commonly used before.
Follow the security prompts carefully. Do not guess answers; provide the most accurate historical information you can remember.
Contact Google Cloud / Firebase Abuse (Log-In Not Required)
If you suspect malicious billing activity or data scraping on your compromised infrastructure, you can report it via the public Google Cloud Platform / Firebase Abuse Form, which does not strictly require you to be logged into the compromised account to submit an initial report:
Post on the Official Google Account Help Community
While waiting, you can create a temporary Google account just to post on the dedicated Account Recovery forum. Product Experts there can sometimes escalate complex hijacking cases directly to the Google engineering team:
Please act on your banking/billing security first to protect yourself from costs, then proceed with the Account Recovery steps. Wishing you a swift recovery of your account!
My Credit Card is already blocked, but I fear there will be a large bill for thousands of dollars until the end of the month until google tries to charge my credit card. It’s hard to believe that there is now way to get in contact with someone at google cloud in such a case.
According to Google Cloud’s official billing and security documentation, here is exactly how Google handles this situation and what you need to do right now:
1. Google Cloud Billing Support is 100% Free
Google’s official documentation states that Billing Support is free for all users, regardless of your support plan tier. You do not need a paid subscription to get in touch with a billing representative.
If you still have access to the Console, go to the Google Cloud Console Support page and select Billing Support to open a case immediately.
If you are completely locked out of the account, you can use Google’s public Cloud Billing Support Contact Form (available without logging into the hacked account) to report unauthorized charges.
2. File a “Billing Dispute” for Fraudulent Charges
Google has a specific protocol for compromised accounts. Once you contact Billing Support, explain that your API keys were compromised. Google’s policy for unauthorized usage typically involves:
Investigating the traffic spike: They will look at the sudden usage originating from the leaked API keys.
Applying a Credit/Waiver: Google’s billing team frequently issues one-time adjustments or billing credits to waive massive, unexpected debts caused by compromised credentials, provided you take steps to secure the account.
3. Your Blocked Credit Card Protects You Right Now
Per Google’s automated billing system operations:
When a billing cycle ends, Google attempts to charge the primary payment method automatically.
Since your card is blocked, the transaction will fail.
Google will not be able to automatically pull funds from a deactivated card. Your account will eventually be suspended for non-payment, which actually works in your favor right now because it automatically stops the hacker’s API traffic if you haven’t been able to delete the keys yet.
What you should do this exact moment:
Do not panic about the growing dashboard number. That invoice cannot force its way into a blocked bank account.
Go to the public Google Cloud Billing Support page and submit an Unauthorized Charges / Compromised Account ticket.
Continue focusing heavily on the Google Account Recovery process. Once you regain access, your very first step inside the console must be to delete or restrict the compromised API Keys and shut down any unauthorized Google Cloud projects.
Please Help