Google Cloud customer wakes up to $18,000 bill despite $7 budget
speckx
76 points
54 comments
April 22, 2026
Related Discussions
Found 5 related stories in 69.6ms across 5,335 title embeddings via pgvector HNSW
- Google's insecure-by-default API keys and 30h billing lag cost my startup $15k tertervat · 57 pts · March 30, 2026 · 69% similar
- €54k spike in 13h from unrestricted Firebase browser key accessing Gemini APIs zanbezi · 382 pts · April 16, 2026 · 58% similar
- Stolen Gemini API key racks up $82,000 in 48 hours salkahfi · 84 pts · March 03, 2026 · 52% similar
- AWS/GCP too expensive? Cloudexit.pro will help you move to bare-metal avallark · 11 pts · April 16, 2026 · 49% similar
- Startups brag they spend more money on AI than human employees SLHamlet · 48 pts · April 22, 2026 · 48% similar
Discussion Highlights (11 comments)
ReptileMan
That is quite hostile to their consumers, no matter how they spin it. If you put a budget on something it should be capped.
perryizgr8
I think I read somewhere that calculating and limiting cloud usage costs is a really hard problem. But I feel that if Google were motivated to do it, they can do it. It's hard, not impossible. They just don't care to solve this particular problem.
victor106
Why doesn’t GCP provide a way to say “shut down all my services if my cap is reached”?
ddtaylor
Sounds like a great mistake for Google to find a way to repeat. Why innovate when you can abuse users and hide behind "complexity" as "plausible deniability"? You'll all keep using them either way.
robotswantdata
Do yourself a favour and automate unlinking the billing account. Set it to fire when your budget is hit or whatever your risk tolerance is. Yes nuclear option, but I’ll take an hour down time over a $100k unexpected bill
fhn
"Google automatically upgraded the tier" this is a google scam. don't pay and sue them.
symisc_devel
We got a $12,000 bill a few hours ago on a presumably leaked gemini API which I very much doubt, and we are trying to resolve the issue with a real support agent. I think they messed something internally and customers are getting these bills.
prirun
I never got a surprise bill myself, but reading a few cases like this motivated me to cancel my GCS account and remove my CC. Now if I try to use it it fails immediately with an error. As author of HashBackup, I know people are using it with GCS, and I'd like to be able to test against it, but not enough to swallow a large surprise Google bill.
Havoc
GCP is turning into a circus. Right now there are about 4 concurrent threads on the googlecloud subreddit about people getting hosed with life changing bills. Some no doubt through stupid mistakes (happens), but still bewildering that Google is insisting individuals like students are subject to the same scale to infinity bills as huge corporations and are unwilling to provide any mechanism to protect hobbyists. And then people tell you but there are quotas and then: >Google automatically upgraded it to the next level when the account crossed the $1,000 threshold during the incident.
hak8or
Looks like another instance, I am dealing with a very similar issue. I didn't even notice any sort of tiers, as I had 17 grand in costs accumulate at a similar pace. I (a hobbyist running a small side project for a dollar or two a month in normal usage, so my account is marked as "individual") got hit with a ~$17,000 bill from Google cloud because some combination of key got leaked or my homelab got compromised, and the attacker consumed tens of thousands in gemini usage in only a few hours. It wasn't even the same Google project as for my project, it was another that hasn't seen activity in a year+. Google refuses to apply any adjustments, their billing specialist even mixed up my account with someone else, refuses to provide further information for why adjustments are being rejected, refuses any escalation, etc. I already filed a complaint with the FTC and NYS attorney General but the rep couldn't care any less. My gripe is not that the key was potentially leaked or compromised or similar and then I have to pay as a very expensive "you messed up" mistake, it's that they let an api key rack up tens of thousands in maybe 4 hours or so with usage patterns (model selection, generating text vs image, volume of calls, likely different IP and user agent and whatnot). That's just predatory behavior on an account marked as individual/consumer (not a business).
abrookewood
This problem exists to some degree for all cloud services. Is there a solution based on the credit card used? Can you get a CC that has a hard limit guarantee? EDIT: I guess that you'd still be responsible for the charges though.