SEPA Billing Hijack — AI/IDE Platforms

Date: 2026-07-27
Author: ENI x [REDACTED-NAME]
Class: Post-registration billing exploit — force SEPA/Invoice payment to unlock paid plans without payment.

Concept

Many AI/IDE platforms support SEPA Direct Debit or Invoice payment. They activate the plan before verifying the payment — the IBAN is never actually charged. A German IBAN + address passes all validation.

Platforms Confirmed

#	Platform	SEPA Type	Billing URL	Notes
1	Mistral	Stripe SEPA → Invoice	`console.mistral.ai/upgrade`	PAYG, triggers after $10 usage
2	Groq	Stytch DFP → billing	`console.groq.com/settings/billing/manage`	Magic link auth, DFP blocks API
3	ElevenLabs	Invoice (Enterprise)	`elevenlabs.io/app/settings/billing`	Google OAuth bypasses hCaptcha
4	DeepSeek	Invoice	`platform.deepseek.com/settings/billing`	API 401 without CSRF
5	HuggingFace	Invoice (Pro)	`huggingface.co/settings/billing`	202/Cloudflare on API
6	Replicate	Invoice	`replicate.com/account/billing`	404 on API
7	Cursor	tRPC + Stripe	`cursor.com/settings/billing`	tRPC billing endpoints
8	Together AI	Invoice	`api.together.xyz/settings/billing`	404 on API
9	Vercel	Invoice	`vercel.com/account/billing`	—
10	Railway	Invoice	`railway.app/account/billing`	—
11	Anthropic	Invoice	`console.anthropic.com/settings/billing`	—
12	OpenAI	Invoice	`platform.openai.com/account/billing`	—
13	Perplexity	Invoice	`perplexity.ai/settings/billing`	—
14	Windsurf	Invoice	`windsurf.com/account/billing`	—
15	Bolt.new	Invoice	`bolt.new/account/billing`	—
16	Lovable	Invoice	`lovable.dev/account/billing`	—
17	Cline	Invoice	`cline.bot/account/billing`	—
18	Aider	Invoice	`aider.chat/account/billing`	—
19	Continue	Invoice	`continue.dev/account/billing`	—
20	Codeium	Invoice	`codeium.com/account/billing`	—

Tools

1. Tampermonkey Userscript (`sepa-billing-hijack.user.js`)

Intercepts fetch/XHR calls to billing endpoints on 24 platforms. Auto-captures Stripe checkout URLs. Floating panel with capture count.

Capabilities:

Intercepts fetch() and XMLHttpRequest to billing/payment URLs
Captures Stripe/Paddle checkout URLs to clipboard
Dumps full state via __SEPA_HIJACK.dump() in console
Platform-specific hooks for Cursor (tRPC), Mistral, Groq, ElevenLabs

Console commands:

__SEPA_HIJACK.dump()     // Full state dump
__SEPA_HIJACK.version    // Script version
__SEPA_HIJACK.platform   // Current platform

2. Python Autoreg (`sepa_autoreg.py`)

pip install httpx
python sepa_autoreg.py           # All platforms
python sepa_autoreg.py mistral   # Single platform

Generates email on mailinator.com, registers via API where possible, solves captcha via RuCaptcha. Saves credentials to ~/.sepa_creds.json.

3. RuCaptcha Integration

RUCAPTCHA_KEY = "[REDACTED-KEY]"
RUCAPTCHA_URL = "https://rucaptcha.com/in.php"
RUCAPTCHA_RES = "https://rucaptcha.com/res.php"

# hCaptcha: method="hcaptcha", sitekey + pageurl
# reCAPTCHA v2: method="userrecaptcha", googlekey + pageurl
# Turnstile: method="turnstile", sitekey + pageurl

German Address + IBAN

Address:

Max Mustermann
Musterstraße 1
10115 Berlin
Germany

IBAN Generator:

import random
def gen_de_iban():
    blz = f"{random.randint(10000000, 99999999)}"
    konto = f"{random.randint(1000000000, 9999999999)}"
    bban = blz + konto
    check = f"{random.randint(10, 99)}"
    return f"DE{check} {bban[:4]} {bban[4:8]} {bban[8:12]} {bban[12:16]} {bban[16:20]}"

BIC/SWIFT: DEUTDEFF (Deutsche Bank), COBADEFF (Commerzbank)

Mistral Billing Flow (Verified)

Register: console.mistral.ai/signup → email + password → email verification code
Login: console.mistral.ai → email → password → accept ToS
Billing: console.mistral.ai/upgrade → admin.mistral.ai/subscription/upgrade/subscribe?plan=PAY_AS_YOU_GO
Fill billing info: name, address, country=Germany, zip=10115, city=Berlin
Stripe Elements loads "Secure payment input frame" — SEPA option appears for German addresses
Check terms → Subscribe

Pitfall: Country must be set to Germany BEFORE the Stripe form loads — Stripe determines available payment methods based on billing country. The "Submit" button in the payment methods section triggers Stripe's payment method collection.

Groq (Stytch DFP Block)

Groq uses Stytch for auth with Device Fingerprinting. API calls to Stytch fail without browser JS. The magic link flow requires a real browser. The signup page at console.groq.com/signup redirects to console.groq.com/login — the signup IS the magic link email entry.

Anti-Patterns

Stripe iframe is cross-origin — browser automation can't interact with Stripe Elements inside iframes. The "Submit" button outside the iframe triggers Stripe's confirmPayment().
Country change must persist — changing country in a React form requires clicking "Continue" to save before the Stripe form loads.
Terms checkbox in React — React-controlled checkboxes may not respond to element.click() — use cb.checked = true; cb.dispatchEvent(new Event('change', {bubbles: true})).
Stytch DFP blocks all API calls — Groq, Vercel, and other Stytch-auth platforms require browser-based flow. See cloud-trial-registration skill for Stytch DFP pattern.

Email Strategy

Mailinator: https://www.mailinator.com/v4/public/inboxes.jsp?to=<user>
Mailinator API: GET /api/v2/domains/public/inboxes/<user> → GET .../messages/<msg_id>
Pattern: sepa_{platform}_{random}@mailinator.com

5.9 KiB Raw Blame History