Congratulations, You're Now Subscribed to Something You've Never Heard Of
There's a special kind of horror that comes with checking your credit card statement and seeing a $14.99 monthly charge from "DGTL MEDIA PREM SVCS" or "WLLNSS PLT MNTHLY" -- services you've never signed up for, from companies you've never heard of, in what appears to be a language where vowels are illegal. Welcome to subscription fraud, the fastest-growing flavor of financial crime.
Subscription fraud is particularly insidious because the amounts are designed to fly under your radar. Scammers know that a $4.99 charge is less likely to trigger your attention than a $500 one. They're playing the long game, siphoning small amounts from thousands of victims simultaneously. It's death by a thousand tiny recurring charges, and most people don't notice for months.
The average victim of subscription fraud doesn't discover the unauthorized charges for nearly five months. In that time, at just $9.99 per month, a scammer has pocketed almost $50 from a single victim. Multiply that by tens of thousands of compromised card numbers, and you start to understand why this is a billion-dollar criminal enterprise.
The Five Ways Scammers Get You Subscribed
Understanding how subscription fraud works is the first step to protecting yourself. Scammers have refined their techniques into an art form, and new methods emerge constantly. Here are the five most common attack vectors:
Stolen Credit Card Numbers
This is the classic approach. Scammers obtain credit card numbers from data breaches, phishing emails, skimming devices, or dark web marketplaces where stolen card data is sold in bulk. They use these numbers to sign up for subscription services, often creating fake accounts with disposable email addresses. The charges are small enough that many cardholders don't notice, and the services are real enough that banks don't immediately flag them. Your card number from that restaurant breach three years ago? It might still be circulating.
The Fake Free Trial Trap
You see an ad for a "free" product -- maybe a sample of a skincare cream, a free week of a streaming service, or a complimentary ebook download. You enter your credit card "just for shipping" or "to verify your identity." Two weeks later, you're being charged $79.99/month for a "premium membership" you never knowingly agreed to. The terms were buried in microscopic text below the fold, and the cancel process requires sending a carrier pigeon to a PO box that doesn't exist.
Dark Pattern Sign-Ups
You're buying something online, and somewhere in the checkout process, a pre-checked box signs you up for a monthly subscription to a "partner service." The checkbox is designed to blend into the page. The language is deliberately confusing: "Uncheck this box to not opt out of not receiving our premium service." By the time you parse that triple negative, you've already been subscribed and your card has been charged. It's technically not fraud since you "agreed," but it's as close to fraud as you can get without wearing a ski mask.
Account Takeover
Scammers gain access to your existing accounts (email, app store, or streaming service) and add premium subscriptions or upgrade your plan. If someone gets into your Apple ID or Google account, they can subscribe to apps and services that charge through your linked payment method. You might not notice until you see the charges, especially if the scammer is smart enough to choose services with similar names to ones you already use.
Phantom Merchant Fraud
This is the most sophisticated version. Scammers create completely fake businesses with real-looking websites and legitimate merchant accounts. They sign up victims using stolen card data and process recurring charges through the payment system. When victims try to find the company to cancel, the website is a shell, the customer service number goes nowhere, and the only way to stop the charges is through your bank. These operations often disappear and reappear under different names.