hie to respond when you find multiple in-app purchases debited on credit-card

[W0t]

Found loads of iTunes transactions totalling £430 from last 2 days on my credit card (ROBLOX plus few other things). Ds (age 10) says he clicked a link. He knows a £5 in-app purchase has to be approved by me, and it's protected by my password. Me and dh are puzzling it. Rarely do the kids go to relatives, and I have to collect today n try to sort out. Dh thinking it's down to trust, and poor parenting. His aunt is concerned as to how it came about too. He knows about getting approval from us to buy in-app. I feel like a forensic detective trying to figure it out. If it's not just clicking a link and they are in-app purchases made by ds, what would be a suitable consequence? How does he learn from this?

Secondly, We have large debt on card already. Do people get these in-app purchase errors reversed somehow?

Itunes should be able to detail what the purchases were, is it from games etc that your ds plays?

It could possibly be that your account has been hacked, possibly from a dodgy link being clicked.

Immediately change your password and if payments continue cancel the card.

Look at what has been brought and when, plus if any are reoccurring payments. Try to determine if it is definitely DS or someone else.

Talk to DS about financial management. Talk about trusting people and Integrity.

I assume your password has accidentally been saved to the account or he has managed to watch you put it in and used it.

If hacked through a link they'd still have to know your password (and I doubt hackers would be bothering with in app purchases on ROBLOX how is that a benefit to them?)

Oh thank goodness. I got onto chat with apple support and they say they will refund, will re-credit in up to 10 days. It doesn't help that we're up to limits and have payments to make. WIll have to figure that one next.

One transaction was for an app, Unlimited Robux for Roblox. Whether it's another user wanting to scam the account. I also noticed an email notification from ROBLOX from the start of the month, saying the email account had been changed to an unknown email address I didn't recognise. It happened once before they changed the email then changed the password too. Got that put right by Roblox, I reset the password, now it happens again? Miss something and takes a bit to sort out. Glad that Apple have been so helpful. If son has hacked, what consequence should there be. He went to sleep worried according to his aunt, he obviously didn't expect this. This isn't like him.