User hit with $87K Google Cloud Gemini bill after downloading malware from a Google ad
AntCalculus · reddit · 2026-09-18
Reddit user Ioannis Tsiokos says he downloaded what looked like Claude Code from a Google ad that pointed to a spoofed Anthropic domain. Two weeks later Google Cloud tried charging him $87K for Gemini image generation.
Key details:
- His Gemini account was free/low tier; the hacker bypassed spend limits by creating multiple projects
- Google Cloud offered a "courtesy" erasing $65K, leaving $22K in debt now moving to collections
- He argues Google Ads' ToS disclaims responsibility for malicious ad links, Gmail/Chrome carry no security guarantees, and GCS offers no absolute spending cap
- Greek police are investigating, but he stresses this was a criminal compromise, not a leaked API key
The post questions why users bear full liability while Google holds payment identity data for both the ad account and the perpetrator's paid Gmail.
More from Companies & People
- No paper, no junior AI job: students flood ICLR/NeurIPS as hiring credentials — deepakns · 2026-09-20
- DeepMind staffer praises the lab's old-fashioned, natural culture and lovely colleagues — brianryhuang · 2026-09-20
- A Six-Dimension, Six-Level Framework for Scoring Your Organization's GenAI Maturity — kashifmanzoor · 2026-09-20
- Cambridge offers up to £10,000 per project for AI in teaching experiments — lawrennd · 2026-09-20
- Nucleus launches Vitruvian genetic optimization models claiming 14 IQ point embryo gains — ___Patrice___ · 2026-09-19
- Insiders: OpenAI and Anthropic oversold AI security breaches to pressure feds — Neurogence · 2026-09-19