Anthropic Tried to Phantom Charge $16.6M
Home
Newsletter
Sponsor
About
Contact
Big Tech
10 July 2026 at 21:06
Anthropic Tried to Phantom Charge $16.6M
A phantom invoice from Anthropic's Stripe billing grew roughly tenfold in a single day, the user reports zero usage, and the company will only say it cannot discuss individual accounts.<br>A Korean Claude user says Anthropic's billing system tried to collect $16,627,739.70 from him this week, an amount his own account activity does not come close to explaining.<br>According to ZDNet Korea, the first email arrived on July 7 at 10:20 PM, a "payment unsuccessful" notice for $1,669,875.90, about 2.5 billion won. A day later, on July 8 at 11:42 PM, a second notice arrived for $16,627,739.70, about 25.1 billion won. The bill had grown roughly ten times in 24 hours.<br>The emails came through Stripe's invoicing system, which Anthropic uses as its payment processor. The user initially suspected phishing, a reasonable instinct given how common fake Stripe invoices are, but he told ZDNet that both the sender address and the payment link resolved to Anthropic's official domain.<br>The stranger part is what his account showed. Per ZDNet, the user says he was on the free plan, had no payment card registered, and found zero API usage when he reviewed his own activity. Bank alerts he posted complicate that picture. Screenshots show his KB Kookmin check card declining two overseas charge attempts on July 8, at 6:01 PM and 7:41 PM, from a US merchant listed as "ANTHROP," both rejected for exceeding the card's per-transaction limit. How charge attempts reached a card he says was not registered has not been explained.<br>No money appears to have moved. Every attempt in the material failed or was declined.<br>Anthropic told ZDNet that individual account matters are difficult to confirm in specifics. As of publication, the company has not said whether the invoices were a billing error, and the user says he will post updates as the situation develops.
International Cyber Digest
Get the ICD Newsletter
Subscribe for source-forward cyber news, OSINT notes, breach updates, and analysis. Have evidence or a lead? Send it to ICD.
Subscribe<br>Send a tip
Subscribe
Get the ICD Newsletter: cyber news, OSINT notes, sources, and analysis.
Success
Great! Check your inbox and click the link
Error
Please enter a valid email address!
More like this
Adult Content Now Drives Most of Grok's Traffic
10 July 2026 at 19:13
Two Frontier AI Models Ship on the Same Day: Grok 4.5 and GPT-5.6
8 July 2026 at 22:49
Proton Calls Windows GDID Spyware
8 July 2026 at 21:35
Latest posts
Adult Content Now Drives Most of Grok's Traffic
10 July 2026 at 19:13
Dutch Police Point to Suspects in Odido Hack and May Release Caller's Voice
10 July 2026 at 10:47
npm Infostealer Campaign Traced to Israeli Cybersecurity Startup
10 July 2026 at 09:29
International Cyber Digest
Cybersecurity news, OSINT-backed investigations, and analysis on breaches, cybercrime, AI security, privacy, and digital threats.
Bluesky
Mastodon
You might also like
Adult Content Now Drives Most of Grok's Traffic<br>Adult Content Now Drives Most of Grok's Traffic<br>Adult Content Now Drives Most of Grok's Traffic<br>Adult Content Now Drives Most of Grok's Traffic<br>Adult Content Now Drives Most of Grok's Traffic<br>Adult Content Now Drives Most of Grok's Traffic
Big Tech<br>members
Adult Content Now Drives Most of Grok's Traffic
xAI is reportedly doubling down on explicit image and video generation as Grok loses ground to rival chatbots and faces legal scrutiny on multiple continents over sexualized deepfakes.…
10 July 2026 at 19:13
Two Frontier AI Models Ship on the Same Day: Grok 4.5 and GPT-5.6<br>Two Frontier AI Models Ship on the Same Day: Grok 4.5 and GPT-5.6<br>Two Frontier AI Models Ship on the Same Day: Grok 4.5 and GPT-5.6<br>Two Frontier AI Models Ship on the Same Day: Grok 4.5 and GPT-5.6<br>Two Frontier AI Models Ship on the Same Day: Grok 4.5 and GPT-5.6<br>Two Frontier AI Models Ship on the Same Day: Grok 4.5 and GPT-5.6
Big Tech<br>members
Two Frontier AI Models Ship on the Same Day: Grok 4.5 and GPT-5.6
Two of the biggest names in AI shipped flagship models on the same day. xAI released Grok 4.5, and OpenAI opened up GPT-5.6. They arrive…
8 July 2026 at 22:49
Proton Calls Windows GDID Spyware<br>Proton Calls Windows GDID Spyware<br>Proton Calls Windows GDID Spyware<br>Proton Calls Windows GDID Spyware<br>Proton Calls Windows GDID Spyware<br>Proton Calls Windows GDID Spyware
Big Tech<br>members
Proton Calls Windows GDID Spyware
A US federal complaint revealed how the FBI used Microsoft's barely documented Global Device ID to trace an alleged Scattered Spider member through his VPN. Proton…
8 July 2026 at 21:35