Source-linked reports: Amounts and outcomes come from the original reports and linked replies.

Otherwadwalekeshav-unexpected-26

wadwalekeshav2019: unexpected $26.83 invoice suspended the account.

Community user wadwalekeshav2019 reports unexpected invoice IN-80233960 for $26.83 that suspended the Cloudflare account for toolisky.com. The author says they did not intentionally subscribe to a paid service, traffic is relatively low, and asks Cloudflare to identify the service and review the charge.

What happened

Reported cause: Unknown
Incident date: Date not recorded
First reported: 2026-09-28
Billing outcome: Request submittedAuthor-reported
Case progress: Not established
Public Cloudflare reply: Not linked

Latest reported outcome

Community replies say the invoice itself lists the charged services; no billing outcome is reported before auto-close.

View this update in the timeline

Original sources

Original Cloudflare Community post

Each entry links to the report or reply it describes.

Case timeline

2026-09-28
Author reports $26.83 charge and account suspension
Open original source
The author reports invoice IN-80233960 for $26.83 suspending the account and asks which service generated it.

Author experienceAccount-wide usage-based products

A budget alert is a horn, not a brake

@GUYUE_LGY points to Cloudflare’s Budget alerts documentation: alerts send email when spend crosses a threshold but do not pause or cap usage. Before letting AI run unattended, the author checks what actually happens at the line.

Other

Meathill: OpenNext KV ISR cache left unpaid TTL work and ballooned storage.

Meathill reports that an OpenNext Cloudflare KV incremental-cache path for Next.js ISR left a TODO for KV TTL, so versioned page snapshots accumulated. Dashboard billable storage showed 3.59 GB-month over the 1 GB free allowance with ongoing extra charges, and historical zombie data reached about 24 GB before he moved to a new namespace. He does not state a dollar invoice total.

Community resourceWorkers AI +1

ClaudeBar’s Cloudflare AI provider: Workers AI neurons and overage in the menu bar

The open-source macOS menu bar app ClaudeBar added a Cloudflare AI provider that shows today’s Workers AI neurons against the free daily allocation, an estimated Workers Paid overage, AI Gateway tokens and the last invoice, using a read-only API token.

D1 status writes: an author reports a 150-dollar charge and refund.

@wofuhuola describes a generated tool writing Reddit post statuses globally every five minutes and deleting expired rows. The author says one month cost 150 dollars, went unnoticed for three months, and was later refunded after an appeal.

Workers

Thunderbit: a browser-extension client loop drove about $38,772.92 in Workers charges.

Community user shuai of Thunderbit, a Chrome extension with about 200,000 users, says a bug in one extension build made every client repeatedly call their Worker, producing an anomalous charge of about $38,772.92 for the May 18 to June 17, 2026 cycle, with a second cycle accruing the same way. The bug was fixed and usage returned to baseline; they say a billing case with a full usage audit requested a refund and had no response.

Durable Objects

babynarc: a Durable Objects alarm loop and a surprise bill that grew from $300 to $500.

@babynarc says an alarm loop in an old Durable Object he thought was inactive left him badly burned: he watched a surprise $300 bill grow to $500 even after killing it. Replying to Cloudflare's Dane Knecht and Kenton Varda, he suggests prepending budget-alert details to every `cf` result by default.