Credit-monitoring ghosts: kill the $8-$35 charges after the breach is over (2026)

The $8-$35 zombie charge

Credit-monitoring and identity-protection plans are easy to forget because the original reason for signing up often disappears: a data-breach offer, a free trial, a new bank-account perk, or a family member's app download. The charge keeps arriving under a bureau, security brand, or payment platform.

The CFPB says identity-monitoring services can cost from a few dollars a month to more than $15 a month, and that prices and features vary widely. 1 Current vendor pages show why the zombie is worth hunting: Experian lists 7 days free, then $24.99/month; LifeLock lists monthly plans from $12.49 to $34.99, with annual renewals of $124.99, $199.99, or $349.99 on its Core, Advanced, and Total tiers. 2 3

That is $299.88 for one year at $24.99/month, or $419.88 at $34.99/month, before tax. The first job is not deciding whether the protection is "worth it." It is proving whether you are still paying for it.

Run the 13-month statement sweep

Annual plans are the reason a 12-month scan can miss a zombie. Pull 13 months of statements from every card, checking account, PayPal account, and app-store account used by your household or business.

Search each statement and inbox for these exact terms, one at a time:

EXPERIAN
LIFELOCK
NORTON
IDENTITYIQ
AURA
CREDIT MONITOR
IDENTITY
IDENTITY THEFT
MONITORING
DARK WEB
FRAUD ALERT
MEMBERSHIP
AUTOPAY
RENEWAL

Do not search only for the brand you remember. A charge may use the parent company or the payment rail instead. For every hit, record:

the exact statement descriptor
amount and posted date
whether it repeats monthly or annually
the card or account charged
the place you can manage it: direct merchant, Apple, Google Play, or PayPal

Then search your email for welcome, trial, renewal, membership, and cancelled alongside the brand name. A receipt, welcome email, or renewal notice can identify the account even when the statement descriptor is shortened.

The three-minute proof test

Open the merchant account without clicking any upgrade or retention offer. Find the plan name, next billing date, and billing source. If the account shows no active plan but the statement still shows a recurring charge, check Apple, Google Play, and PayPal before contacting your bank. Those platforms can hold the billing agreement even when the merchant app is gone.

If you never authorized the charge, mark it as an unauthorized transaction and contact the payment provider promptly. Do not label a charge "fraud" merely because you forgot about it; first identify the account and billing path.

What the charge can cost

Service or benchmark	Published price	The audit implication
CFPB identity-monitoring benchmark	A few dollars to over $15/month	A small-looking charge can still be a recurring service, not a bank error.
Experian identity protection	7 days free, then $24.99/month	A short trial can become a $299.88 annual habit.
LifeLock Core	$12.49/month, or $124.99/year	Search for both monthly and annual renewal patterns.
LifeLock Advanced / Total	$19.99 / $34.99 monthly, or $199.99 / $349.99 annually	A family or bundled plan can hide a four-figure annual household total if several accounts overlap.
IdentityIQ Secure Basic	Starts at $8.49/month; its pricing page also shows a $106.99 annual display	Check for a low monthly charge and a separate yearly renewal.

The CFPB also points out that free and low-cost alternatives exist, including a security freeze and a fraud alert. A freeze generally blocks new credit from being opened in your name; a fraud alert requires lenders to take extra steps to verify you. Neither is a blanket substitute for every paid feature, but both are worth comparing before you let a forgotten plan renew. 1

Cancel the actual billing path

The rule is simple: cancel at the place named on the charge. Deleting an app, changing the card in your wallet, or freezing your credit does not by itself cancel a subscription.

Direct merchant billing

Experian: For a paid monthly membership, sign in and update the membership type to the free membership with no monthly costs. Experian's help page does not publish a separate confirmation or refund step. Save a screenshot of the page showing the free membership and note the date. If the downgrade button is missing, or your plan is annual, use Experian's contact page and ask for the cancellation in writing. 4

Say:

I am cancelling my paid [plan name] today and moving to the free membership. Please stop future recurring charges, tell me the paid-through date, and send confirmation to my email.

LifeLock / Norton: Submit the cancellation request through the LifeLock member support request page, or use Norton Member Services and Support. Cancel before the renewal date. The official policy says protection continues through the current paid period and the subscription will not renew. It also says annual members can generally request a refund within 60 days of purchase or annual renewal, while monthly members can generally request one within 14 days, subject to the policy conditions. 5

Say:

Please cancel my LifeLock membership before the next renewal. I want the cancellation date, paid-through date, and refund eligibility in writing. I am not accepting a downgrade or a pause.

IdentityIQ: Sign in to the member dashboard and use the Cancel button where it is available. If it is not available, call IdentityIQ Customer Care at 877-875-4347 during business hours. The official FAQ does not publish a more detailed dashboard path, so ask the representative to read back the cancellation date and send a confirmation. 6

Say:

Cancel my IdentityIQ [plan name] today. Do not pause or change the plan. Please confirm the last paid-through date and that no further recurring payment is authorized.

When a representative offers a lower tier, a pause, or a transfer, repeat: I am not changing the plan. Please process the cancellation and give me the confirmation reference.

Apple billing

On iPhone or iPad: Settings > your name > Subscriptions > the identity-protection service > Cancel Subscription. If there is no Cancel button or a red expiration message, Apple says the subscription is already cancelled. For a free or discounted trial, cancel at least 24 hours before the trial ends. 7

Your proof is the subscription screen showing the expiration date or the absence of the Cancel button. Save it before closing Settings.

Google Play billing

Open the Google Play subscription page, select the service, tap Cancel subscription, and follow the prompts. Google says uninstalling the app does not cancel the subscription. After cancellation, access normally continues through the paid period, but the next cycle should not bill. 8

The counter-script for an app that keeps offering a pause is: Cancel the subscription. I am not pausing it, and uninstalling the app is not my cancellation request.

PayPal billing

On the PayPal website, go to Settings > Payments > Subscriptions and saved businesses or Automatic Payments, select the merchant, and cancel the automatic payment. PayPal says this page also shows the merchant's contact information. Check it even if the merchant account says you have no active plan. 9

Keep the PayPal cancellation screen and the merchant confirmation together. They prove two different things: one stops the PayPal billing agreement, and the other closes the service.

When the charge survives cancellation

For a bank-account automatic debit, the CFPB says you can revoke permission even if you previously allowed it. Call and write the company, then call and write your bank or credit union saying that authorization has been revoked. A stop-payment order may be available, and the bank may charge a fee. Keep the dates and copies. The CFPB also warns that stopping the automatic payment does not cancel what you owe under the service agreement, so cancel the membership with the company as well. 10

Use this bank script:

I revoked [merchant]'s authorization to take automatic payments from my account on [date]. Please tell me the process for blocking future debits and what documentation you need. I will continue monitoring the account for any payment after that revocation.

If a post-cancellation charge appears, contact the merchant first for a refund, then the card issuer, bank, or payment platform with your dated cancellation proof. For an account debit made after you revoked authorization, the CFPB says to tell the bank right away and ask about disputing the transfer. 10 The FTC's consumer guide on free trials, auto-renewals, and negative-option subscriptions is a useful plain-English reference for the pattern and the complaint route. 11

The prevention mechanic: breach offer gets a deadline

Use a two-part rule for every identity-protection offer:

Choose the end date before you enroll. Put two reminders on your calendar: one five days before a free trial ends and one 30 days before an annual renewal. Name the reminder with the exact merchant and plan, not just "check subscriptions."
Give an intentional trial its own payment rail. A merchant-locked virtual card can be used for recurring transactions, and Privacy.com says you can pause or close the card and set spending limits. It also says closing the card does not replace contacting the merchant to cancel. Use this as a brake, not as your cancellation proof. 12

For a breach-related offer, compare the paid plan with a direct security freeze or fraud alert before the reminder fires. If the paid service still fits your needs, keep it deliberately. If it does not, cancel the merchant, save the confirmation, then close the trial card and verify the next statement.

The kill checklist

Scan 13 months of statements, including PayPal and app stores.
Search EXPERIAN, LIFELOCK, NORTON, IDENTITYIQ, AURA, AUTOPAY, and RENEWAL.
Identify who bills you before cancelling.
Cancel the merchant and the billing platform when both show an agreement.
Save the cancellation screen, date, paid-through date, and reference number.
Check the next statement for a post-cancellation charge.
Put every intentional trial on a named calendar reminder.

A forgotten identity-protection plan is not a security strategy. It is a recurring transaction. Find the descriptor, cancel the right rail, and keep the proof.

Credit-monitoring ghosts: kill the $8-$35 charges after the breach is over

The $8-$35 zombie charge

Run the 13-month statement sweep

The three-minute proof test

What the charge can cost

Cancel the actual billing path

Direct merchant billing

Apple billing

Google Play billing

PayPal billing

When the charge survives cancellation

The prevention mechanic: breach offer gets a deadline

The kill checklist

References

Related content