Anthropic Console Overcharges Card 100‑Fold Due to Internationalization Bug
anthropic
| Source: HN | Original article
A bug in Anthropic Console's internationalization input caused a user to be charged 100 times the intended amount, highlighting missing confirmation screens and input sanitization.
Anthropic’s developer console has unintentionally charged a user a hundred times the amount they intended, exposing a critical flaw in the company’s billing infrastructure.
The problem stems from an internationalisation (i18n) bug in the payment flow that strips decimal points from the amount entered. Because the checkout process lacks a confirmation screen and any input sanitisation, a user who types “5.04” can be billed “504”. A Costa‑Rican legal‑tech attorney reported that his attempt to top up $5.04 in API credits resulted in a $504 charge, which, after local VAT, rose to $569.52. The same issue could affect anyone entering a decimal amount, instantly inflating the charge by a factor of 100.
The incident matters for several reasons. First, it highlights how even well‑funded AI firms can suffer from basic engineering oversights, undermining confidence among developers who rely on predictable pricing. Second, the bug reveals a broader vulnerability in Anthropic’s internal tooling, raising questions about the robustness of the company’s financial controls as it pursues large‑scale financing – a story we covered earlier this month when Anthropic secured a multi‑billion‑dollar debt package. Finally, the lack of a confirmation step and proper sanitisation may attract regulatory attention, especially in jurisdictions with strict consumer‑protection rules.
Going forward, observers will watch for Anthropic’s official response: whether the company issues refunds, patches the checkout flow, and introduces safeguards such as explicit confirmation dialogs and locale‑aware validation. The episode may also prompt other AI platform providers to audit their billing systems for similar i18n weaknesses, reinforcing the need for rigorous UX and security standards as the sector scales.
Sources
Back to AIPULSEN