Paid Account Hacked, someone else is now the Owner

API
22

Do you use any ChatGPT/OpenAI browser extensions by chance?

23

Tx, but no chrome extensions installed.

24

Has anyone managed to regain access to their account? Openai support is not responding in chat. Did you manage to get your money back?

25

Hi and welcome to the Developer Forum!

If you have reached out to the support bot on help.openai.com then please wait for a response from them, there is no one here who can fix that kind of issue.

1 Like
26

Ok, thank you. Unfortunately, someone created additional API keys which I don’t have access to because my owner role was taken away. The tokens are constantly being used up and I can’t stop it… I’ve blocked the cards just in case. It’s a total nightmare dealing with the technical support as they don’t even respond in the chat. I just hope they’ll cancel this token consumption. They really messed up with the account roles, that you can’t restore it even though I’m essentially the rightful owner.

27

I am experiencing the same problem, I am made reader on my own account and someone else is the owner. The OpenAI chat support not responsive. Can’t believe OpenAI allows the owner of the account to be downgraded so easily.

3 Likes
28

I have the same problem! my account has been hacked, I am no longer the owner, the hacker has debited my card for $2000 and OpenAI is not responding!

1 Like
29

I am experiencing the same issue - my account was hacked on Jun 24. This seems large scale. What happening is - the bad actor somehow is able to create a organization in my account where 1) it uses my payment method and 2) put me in “Reader” and the bad actor in “Owner”. This is really bad as I am then not able to remove the credit card associated with it.

The owner email suffix is “@email.com”. So, this is not an outlook issue as someone mentioned previously. Usage started to rockets and the bad actor keep buying credits using my credit card.

1 Like
30

image
image942×71 4.23 KB

It’s creepy that after I disputed with my credit card company, disable the card, enabled the MFA for my openai account, the bad actor removed himself from the owner, leaving me as the Reader of the organization.

31

I have the same issue! 1 year later, also some russian name anatoliy9skab@email.com and an @email.com address. Don’t think they got my password so there has to be a vuln here in auth0 or chatgpt. Spent 1190 dollars before I could block it.

32

Update - I disputed with my credit car company (I am using apple card - virtual. They are able to change the virtual number). But somehow, I keep getting charged by OpenAI after I change my credit card number. I never tell OpenAI my new credit card number. This is terrible!

33

There is no CS phone numbers from OpenAI. I tried the chat. They were not able to locate the transaction even after I provided the requested details, which are 1) Last 4 digits of your card
2) Name of the issuing bank
3) Dates of the charges
4) Amounts of the charges

Update:
The unauthorized card spend seems stopped. I think one of the two things work:

  1. leave the fraudulent organization in openai account
  2. removed the payment methods from openai account (i had to wait for my chatgpt plus subscription ends)