[DE] O2 allowed a Cyprus company to charge 19.99€ to my phone without consent. How is this scam still legal in 2025?
My German mobile provider O2 (Telefónica Germany) allowed a Cyprus-based scam company called CFM (Content For Mobile Ltd.) to charge 19.99€ to my mobile bill using “Bezahlen per Handyrechnung” (direct carrier billing). I NEVER subscribed to anything. No SMS. No confirmation screen. No TAN. No 2FA. No Face ID. No double click. NOTHING. Yet O2 billed me as if I had ordered a monthly subscription called “Abo NBA pro Monat” at 04:51 AM – while I was asleep. Details: • Charge: 19.99€ • Date/time: 26 Nov 2025, 04:51:29 • Company: CFM Ltd., Limassol, Cyprus • Method: Direct Carrier Billing (WAP billing) • Device: iPhone 15 Pro Max (no subscriptions in Apple ID) • O2 displayed it as a “Drittanbieter-Abo” This is NOT a real subscription via Apple, Google or any app store. It’s pure WAP-billing fraud caused by malicious ads or hidden frames, and O2 still allows it. What I have done so far: • filed a formal complaint with O2 • demanded a refund • blocked all third-party billing • contacted the scam company to delete my data (GDPR Art. 17) • filed complaints with the German Bundesnetzagentur • contacted the Verbraucherzentrale • submitted a GDPR complaint to the Cyprus Data Protection Authority How is this still legal in the EU in 2025? Why do mobile operators allow third-party billing without verified consent? Why do consumers need to fight international scams on their own? If anyone had similar experiences, please share your story. submitted by /u/AcanthisittaOpen2952 [link] [comments]
My German mobile provider O2 (Telefónica Germany) allowed a Cyprus-based scam company called CFM (Content For Mobile Ltd.) to charge 19.99€ to my mobile bill using “Bezahlen per Handyrechnung” (direct carrier billing).
I NEVER subscribed to anything.
No SMS.
No confirmation screen.
No TAN.
No 2FA.
No Face ID.
No double click.
NOTHING.
Yet O2 billed me as if I had ordered a monthly subscription called “Abo NBA pro Monat” at 04:51 AM – while I was asleep.
Details:
• Charge: 19.99€
• Date/time: 26 Nov 2025, 04:51:29
• Company: CFM Ltd., Limassol, Cyprus
• Method: Direct Carrier Billing (WAP billing)
• Device: iPhone 15 Pro Max (no subscriptions in Apple ID)
• O2 displayed it as a “Drittanbieter-Abo”
This is NOT a real subscription via Apple, Google or any app store.
It’s pure WAP-billing fraud caused by malicious ads or hidden frames, and O2 still allows it.
What I have done so far:
• filed a formal complaint with O2
• demanded a refund
• blocked all third-party billing
• contacted the scam company to delete my data (GDPR Art. 17)
• filed complaints with the German Bundesnetzagentur
• contacted the Verbraucherzentrale
• submitted a GDPR complaint to the Cyprus Data Protection Authority
How is this still legal in the EU in 2025?
Why do mobile operators allow third-party billing without verified consent?
Why do consumers need to fight international scams on their own?
If anyone had similar experiences, please share your story.
[link] [comments]
What's Your Reaction?
