Developer Charles Jones was billed $11,089.77 by Google Cloud after his Firebase service account key was compromised, resulting in fraudulent AI image-generation charges he never authorised. Despite Google itself flagging the account for "abusive activity consistent with hijacked resources," its billing team has repeatedly refused to waive the charges, leaving Jones with no clear explanation of how the key was exposed or what security failure he committed. The case highlights a broader problem with Google Cloud, where spending caps remain ineffective or unavailable, and customers facing fraudulent charges must navigate an opaque appeals process with no guarantee of a refund.
