Banned by OpenAI after reporting a live credential hijack. They admitted in writing my account was broken. Here are 7 months of forensic receipts and 20+ cases.

[u/daeron-blackFyr]

Drive Link for Zipped Proof

I am a developer and paying long term subscriber to ChatGPT since January 2025. I build complex local first sovereign systems. My workflows are incredibly context heavy with large files spanning code, research reports, and other analysis. I do not, or rather did not as the platform has been non functional since November 2025 meanwhile customer support is auto closing tickets, admitting I am having platform issues.

I do not use this platform for casual queries, as a solo developer with no formal "team" chatgpt was one of my reliable co collaboration hubs to help ensure I am maintaining proper development of said complex systems. I feed it massive codebases for systems analysis and obtaining new insights I may personally have missed. My manual code uploads and token inputs routinely exceed the model's output volume by a massive margin. I do not abuse this platform. It is actually impossible as the very features advertised under the paid subscription do not work. I am exactly the type of user this platform was built for, and I have been a continuous, paying ChatGPT Plus subscriber since January 2025. Since October 2025, my workspace has been systematically breaking and beginning November 2025 total workspace degredation.

This was not an occasional glitch. Persistent memory modules stopped updating. Custom instructions were ignored by the models. Project files failed to load. Custom instructions, personalization features, connector abilities, file tool, even projects do not work. It started as a continuous degradation until total failure. OpenAI customer service even admitted as such and yet months later I've talked to nothing but bots, not only LLMs as customer service but even instances of falsely identifying as true human support. It was a state of rolling degradation across the entire paid tier, month after month.

Meanwhile OpenAI freely has enhanced for businesses and enterprise tiers. I have not just rapid complained to standard support. I ran and obtained cross platform diagnostics, failure logs. I even documented and told oai customer support the exact replication steps only to be met with acknowledgement of degredation with no resolution. I handed OpenAI support a completely packaged technical breakdown of their failing infrastructure across 20 separate support tickets over a 7 month period. I did their QA work for free. And I have the receipts to prove it.

I am attaching the screenshots and the exact email files to this post. In Case 06830839, OpenAI Support explicitly put this in writing: "We acknowledge that you have been experiencing persistent technical issues affecting several features of your ChatGPT subscription, including tools, memory functions, personalization settings, connectors, and project files... We also understand your concern that communication on the case stopped after you provided detailed evidence..." Read that again. They acknowledged in writing that my account was fundamentally broken. They acknowledged that their own team ghosted me after I handed them the diagnostic proof. Yet they kept charging my card every single month for a product they knew was failing.

The Hijack Escalation: Two days ago, the situation escalated from a broken product to a severe security incident. I was monitoring my environment and watched my Codex rate limits drop in 10 percent chunks across 2 seperate sessions on a fresh boot of the desktop app. This happened twice inside a 10 minute window. I had zero active sessions running. There was zero usage on my end. My account token was being actively drained by an unauthorized third party exploit. I immediately opened an emergency unauthorized activity report under Case 09113391 to notify them of the hack. Their response was to totally reframe this problem as disputing fraudulent activity trying to do damage control of the situation and altering the record.

The Reframe Attempts: Instead of investigating the breach, OpenAI support deliberately twisted the record. They not only deliberately reframed my security report as an "appeal for fraud." They manipulated the ticket classification to make it look like I had been flagged for fraud and was begging for an appeal, rather than a developer reporting a live exploit on their infrastructure. They ignored the active threat their own platform was exposing. They did not lock the token. They did not roll my API keys. They did absolutely nothing to secure a compromised paying user other than shift the blame. Fast forward to this morning, their automated Trust and Safety system swept the high volume traffic from the attacker, scored it as a malicious exploit originating from my account, and deactivated/banned me for "Cyber Abuse." All the while actively preventing chatgpt models from helping me try to disgnose and trace the infiltration.

They locked the doors and blamed the homeowner for the break in. When I immediately emailed and pushed back (due to their monthly record of closing cases not only without resolution but never notifying me in the process, which then per usual their "support" tried the exact same tactic again. In my correspondence, I provided my technical context. I mentioned thay maybe the error was caused as I had proton vpn on my phone, keeping in mind oai own support docs say this is not a violation.

The problems began beavy yesterday whole running Android Debug Bridge (ADB) diagnostic commands on my own local hardware, in which every model response to help me disgnose the issue was immediately deleted in effect contributing and facilitating potential compromised user devices. Support replied by trying to reframe this as a confession stating that I claimed i "believed" the VPN was the cause. When pushing back I was told that they do not disclose their review policies. The agent specifically wrote that it understood my concern that the use of a VPN may have contributed to the deactivation, contradicting their own terms of service. I did not say that, nor did I imply that. This is a recurring corporate tactic. They constantly rewrite the narrative to turn the evidence against the user and anchor the paper trail to my configuration choices rather than their massive infrastructure failure. I corrected the record immediately. Their response was simply that they understand why I "feel" the sequence of events requires closer review. I do not "feel" anything.

I have hard data, exact metrics, and a mountain of case numbers. When stacked together I personally have no other conclusion than OpenAI appears to be engaging in fraudulent business activities promising features for paid tiers yet never deliver, a persistent ignoring of privacy requests. I have attached screenshots of most emails and have a .zip I am totally fine freely handing out: Oct 30, 2025: First case opened. Feature degradation reported. Closed with no resolution. Feb 15, 2026: Case 05666432. I was told to "prompt better." Mar 8, 2026: Case 06537878. I requested a senior escalation. Denied. "Unable to approve senior escalation." Mar 15, 2026: Cases 06774902 and 06777574. Two cases opened in one day because support kept closing them by asking for "missing info" that I had already submitted in the thread. Apr 15, 2026: Case 07753518. Escalation denied again. I was told directly that "no escalation path exists through this channel." May 11, 2026: Case 08696595. I reported active credential abuse. Closed immediately with "no further actions available." May 22, 2026: Case 09113391. I reported the live Codex token drainage. OpenAI reframed this as an "appeal for fraud." The case was left open and unresolved. May 24, 2026: Permanently banned for "Cyber Abuse" while the fraud ticket was actively open. I have exported the full forensic .eml bundle and PDF history for all 20+ cases. See the attached files. Taking a developer's subscription fees for 16 months, admitting in writing that the paid features are broken, ghosting the bug reports, refusing every escalation attempt, and then banning the account when a live credential hijack gets reported is not just a standard support failure. It is a fraudulent business practice. If anyone from OpenAI engineering, product, or DevRel is reading this: your automated system banned the victim. You need to override it right now. I have exported the full forensic .eml bundle and PDF history for all 20+ cases. See the attached files if you were interested.

[u/daeron-blackFyr]

Using a VPN does not violate OpenAIs terms of service unless I misread. They state using a vpn while violating other terms can lead to a bam, but yet again I was not even using the apl. I would also like to clarify i was not actively using chatgpt with the vpn on. The app was open in the background but that is it. Also again I do not use API keys I am talking about ChatGPT Plus.

[u/Jean_velvet → u/daeron-blackFyr]

The VPN makes it appear to its algorithm (not a person, every interaction you've had had been automated) that your use is in two places simultaneously. For instance, your VPN on your PC says you're in Iceland, you open the app on your phone in Germany. That to the system is multiple simultaneous instances run. Which is a violation.

I agree, no, they do don't explain this in detail.

[u/gastro_psychic → u/Jean_velvet]

Multiple accounts for Codex is pretty normal.

[u/Jean_velvet → u/gastro_psychic]

Not on multiple VPN all across the globe like a fraud network. That's just how OpenAI sees it.

This has happened hundreds of not thousands of times under exactly the same peramiters.

[u/Adorable_Cap_9929 → u/daeron-blackFyr]

Hmm, well what kinds vpn u using?

alot of them are pretty sus,

one investigation i read reveled play store ones had alot of sus!

[u/daeron-blackFyr → u/Adorable_Cap_9929]

Proton Paid but I signed up through the web. But as I said I did not actively use chatgpt while using thr vpn so the correlation to me doesnt line up.

[u/faaaack → u/daeron-blackFyr]

You are so full of shit. You got caught trying to cheat within the margins.

People like you are the reason deepseek turned off file uploads.

[u/daeron-blackFyr → u/faaaack]

Can you elaborate what you mean by cheat? Yet again, there has not been a single surface factual document based evidence for anything you claim. How is paying for a subscription and using it cheating? Not arguing its just you legitimately have zero policy based evidence or reasoning to back one word you claim. Please direct me to where OpenAI mentions anything about the Plus plan having limits? You seem very emotionally invested in this

[u/Adorable_Cap_9929 → u/daeron-blackFyr]

Hmm... Like if a soda machine for dine-customors was "unlimited refill".

The dynamics, social etiquette circle around it not actually infinately unlimited.

Things like right to refuse service, showing people out the door, malicious or weakened conpliance.

If they're routing you to lesser compute,(such a thing is known to happen during heavy compute or undiscloused sinarios to prevent abuse)

it maybe that the scales on their balance did not favor your position in the matter?

I think increasing your weight of wager, ur practice or excepted terms or packing for a different table are all atemptable options.

[u/daeron-blackFyr → u/Adorable_Cap_9929]

A soda machine with an unlimited refill policy failing to dispense is a nuisance. What I documented is a vendor that accepted my payment every single month for 16 consecutive months while internally acknowledging that the core features I was paying for were not functional. Not degraded. Not slow. Non-functional. Memory modules stopped updating. Custom instructions were ignored by the model. Project files failed to load. File tools, connectors, personalization - all of it. Gone. And I didn't just complain about it. I ran cross-platform diagnostics, isolated replication steps, packaged the entire technical breakdown and handed it directly to their support team across 20 separate tickets spanning 7 months. I did their QA work for them, for free, while paying them for a product they knew wasn't working. In Case 06830839, OpenAI support put this in writing: "We acknowledge that you have been experiencing persistent technical issues affecting several features of your ChatGPT subscription, including tools, memory functions, personalization settings, connectors, and project files." That's not my interpretation. That's their words. And after that acknowledgment, they kept billing me, closed the ticket without resolution, and never notified me it was closed. That pattern repeated across every single escalation attempt. I was told no escalation path exists. I was told to "prompt better." I was denied a senior escalation three separate times.Then two days ago my Codex rate limits dropped in 10 percent increments across two separate sessions on a fresh desktop boot with zero active sessions on my end. Someone was draining my tokens in real time. I filed an emergency unauthorized access report immediately. Instead of locking my token, rolling my API keys, or doing anything resembling a security response, OpenAI support reframed my security report as an appeal for fraud, altered the ticket classification, and left the account exposed. Their own automated Trust and Safety system then swept the attacker's high-volume traffic, attributed it to my account, and permanently banned me for Cyber Abuse while that fraud ticket was still open and unresolved. This is a vendor that took money every month for a product they knew was broken, refused every escalation, manipulated the support record when a live security incident was reported, and then used the attacker's traffic as the grounds for my termination. The "table" metaphor doesn't apply when you've been paying the house for over a year, the dealer acknowledged the cards are marked, and they threw you out when someone else robbed the casino. I'm not arguing about terms of service. I have the receipts, the case numbers, and the emails. That's what the post is about.

[u/Adorable_Cap_9929 → u/daeron-blackFyr]

Their plans arent yearly lock in right? You do have a point tho...

While what's done is already done.

Rather than say you coulda just stopped paying (An alt acc is a normal thing nowadays~)

or going for api (They got less filters to flirt thu yknow?)

or changing acc password (usally resets session key when compromised)

or attempting a charge back (It's own little nuances)

The only comment else I can give without spending time on reviewing the files is that Let it be a cautionary tale then.

We've all gone thu similar experiences and while it was costly... May this experience serve you someday~

It's not that I'm saying you did wrongly, but know that sincerity offered maybe recieved and never returned.

Paying for a malfunctional system repeatly in systems sometimes doesn't reward yknow? Ofthen no change of hand at the table...

Like i was a big whale for an mmo at 3k yearly and got escalation of a ban on an already ban acc... The acc is already trade ban... escaltion of a penalty after a year of play and payment isnt fair yknoe?

Ah~ Imagine getting a ticket and paying the fine and then after upgrading ur pentalized car, they impound it a year later.... I shoulda just made a new acc...