unknownsavage

Around about a year ago, I had my AWS account get fully taken over by a successful social-engineering attack. Prior to a full-take over, the screw-ups by their customer-support were bad enough that in response to a viral blog post ( https://medium.com/@espringe/amazon-s-customer-service-backdoor-be375b3428c4 ) they upgraded me to "executive support" for free.

Regardless, it was all for nothing when they gave my account to someone else. Besides compromising sensitive information, the attacker was able to change the account information and email address to the point I am unable to authenticate.

At this point, I do not care about recovering my account, as I have fully switched to Google cloud and have been extremely impressed by Google's Advanced Protection Program. However, my credit card keeps getting billed by Amazon. When ever I phone Amazon, I can't get through to a reasonable human being as despite having the credit-card in my hands, I can not authenticate against the account with changed details. Nor will Amazon simply remove the credit card number that I can provide them.

I've even requested a new credit card from the bank, however the bank continues to forward AWS charges to me. So I have been going through a kafkaesque ritual of disputing the Amazon charge with my bank only to win and have Amazon bill me for the next month.

However the last dispute I've made, the bank (of America) has now ruled in Amazon's favor and rebilled my account. My bank has replied: "We've thoroughly reviewed the details of your dispute(s), and based on the information we received, we're unable to pursue your dispute(s) future."

At this point, I'm stonewalled between my Bank siding with Amazon, and Amazon not speaking to me. I feel like I'm out of options. What are my options now?

If any human at Amazon sees this, my account number is: 326156978341 and dispute case number is: 92919033. Please for the love of God, stop billing me.

Around 8 months ago I lost control of my AWS account after a prolonged social-engineering campaign against my account. Although it was a nightmare, thanks to a robust offsite backup solution we were able to quickly migrate to google cloud (which has Advanced Account Protection, a godsend for anyone in my position).

Strangely enough, even after several attempts I was never able to recover my hacked AWS account (from my support calls it seems like the attacker changed the email, name, address) and have never been able to authenticate against it.

However the one thing that was never changed is my credit-card. I have offered AWS support several times to give them my credit number and ask them to unlink it from the account, but they refuse to do so without me being authenticated.

I don't want to get on Amazon's bad side, but with no options left I have been resorting to charge-backs on the credit card. Thankfully my bank has been siding with me, and each month I have been winning them -- but next month the new bill comes and I forced to repeat the process.

Not wanting to get a bad reputation with my bank or Amazon, I just asked my bank to send me a new card. But amazingly (?!!!) the next month the bill from AWS still came on the new card.

It's now been 8 months, and I'm sick of the absurdity of the situation. Is there anything I can do?