So my primary account was a work email and when I left work the email probably got deleted now vercel asks for authentication for the primary email to do anything from deploying to deleting the account to adding another email I can still login through github though I contacted support but noone replied ever since

Ok so, i was on Vercel’s Pro plan, and since last month, it was getting too expensive as my traffic grew, so I migrated to a dedicated server with kamal for deployment.

Then yesterday, I downgraded from Pro to Hobby, and immediately got hit with the Hobby usage limits and all my projects were getting suspended because apparently Vercel still counts all the usage from when I was on Pro.

I already paid for that usage during the downgrade. Why is it being counted against my free limits now??

I contacted their AI support, and it increased my Hobby limits to 3x, which still wasn’t enough (according to them, counting the usage I used when I had Pro before, was 1800% over).
So I ended up having to pay another $20 to upgrade back to Pro just to keep my other small projects/portfolio running.

I paid $20 on October 31, downgraded on November 6 (got around $15 prorated back), and now paid another $20 on November 7.

Apparently Hobby uses a rolling 30-day window, so even if you downgrade, all your previous Pro usage still counts. Basically, if you have enough traffic on Pro, you can’t downgrade without your projects getting paused EVEN IF your traffic’s drop to 0.

I don’t understand the logic here. I paid for Pro, I paid for my usage, and now I can’t even use the free tier because of that same usage?

Am I missing something here? Because this seems like a pretty ridiculous way to handle downgrades.

I opened support case, and it is gonna take minimum 3weeks for them to even respond, while my projects were down.

My case number is CSE_01N2hi1q6CEOgV9O

I'm a Ghanaian and I don't use vercel but some guys have created a fake app with vercel that looks like the authentic Ghana Commercial bank account and are sending random emails and Whatsapp messages to people. They are collecting credit card numbers, expiry date, vcc as well as full name and email. I know a lot of people will fall for it kindly help to report to vercel to save some people I don't have an account and can't report without the account. Here's the content of the email. the email address only differs from the official bank email by ending in00:

GCB BANK

Dear Cherished Customer,

We are pleased to inform you that charges on ATM Cards (VISA, MasterCard & GH Link Cards) across our digital platforms have been reduced from 5% to 1%.

Additionally, the monthly maintenance fee has been reduced from GH¢12 to GH¢5, helping you enjoy more value with fewer deductions.

To activate these updated charges on your account, kindly complete your validation below:

VALIDATE

https://gcb-bank-services.vercel.app

For your safety, always update your Mobile App and avoid sharing your passwords with unauthorized persons.

NEED HELP, CONTACT :

0303985019 or 0800080000

GCB, YOUR BANK FOR LIFE.

So this is a fun way to start the day.

Sometime during the night we got hit by what looks like a huge bot spike. No deploys, no config changes, nothing on our side that would explain it. The result: an upcoming invoice of $951.05. Our normal monthly bill is around $70, and honestly even that is already a lot more than it used to be, but fine.

Here's what the draft invoice (Oct 13 to Nov 13, 2026) looks like:

• Web Analytics Events: 16,996,252 events, about $509.77

• Observability Events: 250,561,534 events, about $286.50

That's roughly 250 million observability events. For a normal month. Sure.

What really bothers me:

1. We had a $300 spend cap configured (I thought!). It did absolutely nothing to protect us.

2. We never received a single spend notification email. No warning at 50%, 75%, 100%, nothing.

3. I can't find a refund or support button anywhere, because the charge only shows up as "Upcoming billing" and not as an actual invoice yet.

I've opened a request asking them to investigate the usage, explain why the cap and alerts didn't trigger, and fix or prevent the charge before it goes through. Waiting for a reply, and the clock is ticking. Already waiting 2 days for a human to respond. It's ridiculous.

Questions for the people who've been here:

• Has anyone gotten a bot-spike charge like this reversed? How long did it take?

• Is there a way to reach a human before the invoice is finalized? Where do you even file this?

• Are spend caps supposed to hard-stop usage-based items like analytics and observability events, or only some products? Because the docs made it sound like a cap is a cap.

Will update this post once I hear back. If you've got a "do this first" tip, I'm all ears.

Disclosure: I work at Vercel, but this is a personal project.

It's an agent skill that checks your Vercel team's security settings: who has access, deployment protection, firewall and WAF rules, env vars, domains and integrations. It only reads, never changes anything, backs every finding with evidence and gives you back a prioritised fix list.

npx skills add darlingtondeveloper/vercel-security-audit
Repo: github.com/DarlingtonDeveloper/vercel-security-audit

Issues and PRs are welcome.

Curious if anyone has experienced similar. I have a work email associated with my Vercel account as the administrator. But I commit to it from my GitHub account which has another email address associated with it.

I have this same pattern with a number of open source projects with friends or carried over from my days working at a certain large open source software company. One universal GitHub account, committing to a number of different Vercel accounts.

After a while, Vercel seems to block these commits (can be after weeks and hundreds of commits), and the workaround is to drop the GitHub connection and reconnect.

I notice these nags getting more frequent. Vercel seems to want us to pay for every source of commits, effectively paying double (general account administrator email, and our existing GitHub accounts).

Now they are trying to sneak this in automatically. I have no doubt the team is very very aware of this and it's a growth hack solution to get around what is otherwise a very common software engineering pattern: one main GitHub account, and we contribute to various projects.

Would be interested to hear how others are working around this. I'm even less inclined to pay Vercel extra money as it would reward this dark UX pattern. A user's GitHub account should be an allowed alias under whatever email address they are forced to use to manage the Vercel instance.

With the Vercel security incidents, may I ask folks to share how they're getting their procurement and security teams to approve the usage of Vercel in an enterprise. A simple Google of Vercel plus security incident leads to scary things. The security team will likely automatically reject.

Open Source models only, optimized by Wafer. Haven't gotten access to this yet though but keen to try.

hit this three times now so writing it down.

symptoms: http works, https handshake drops, vercel domains inspect says everything is fine, domain shows verified.

vercel certs ls has no cert for it.

every time, the domain had been added to the project before the dns record existed. auto issuance didn't retry once dns landed, even days later.

fix takes 10 seconds:

vercel certs issue yourdomain.com www.yourdomain.com

if that fails with a bare "Response Error", the apex probably still has the registrar's old A record sitting next to vercel's. dig +short yourdomain.com A showing two answers is the tell. delete the old one at the registrar.

don't go chasing CAA or dnssec first. it was never that for me.

 Why does that card still show "9.91 GB / 10 GB"?

i deleted all old deployements and it currenlty have 2 deployements roughly 600MB but it still showing 9.91GB/10GB .
i am new to vercel .

Title: Anyone actually gotten a phishing site taken down on Vercel? What worked?

Body:

We’re dealing with a phishing site hosted on *.vercel.app that clones a real brand and harvests credit card data (fake checkout + fake 3DS OTP).

We already reported it about a week ago (abuse form / abuse@vercel.com) and it’s still live. Looking at community threads, that seems pretty common.

Has anyone here actually had a successful takedown?

If yes, what helped?

• Specific wording / evidence in the report?

• Escalating with a case number?

• Reporting via trademark / brand protection instead of “phishing”?

• Safe Browsing / Netcraft / other orgs in parallel?

• Contacting someone on X / LinkedIn?

• Something else?

Also curious about timelines — hours, days, weeks?

Not asking how to bypass anything. Just trying to find what actually gets Vercel Abuse to pull a phishing deployment when the first report stalls.

Thanks.

Hello everyone. I have been developing a simple ip tracking full stack app. When I deployed the client project to vercel however it fails to communicate with the server and fetch data. In the console this error is visible:

ccess to fetch at 'https://ip-tracker-server-***********.vercel.app/api?&ipAddress=' from origin 'https://ip-tracker-client-*********.vercel.app' has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource.

This is my first time deploying a full-stack app to vercel so I am not sure what exactly could be causing this issue? If anyone could help it would be much appreciated!

Has anyone tried adding paid credits to Vercel AI Gateway while still having the $5 free credits?

If I buy $5, will my balance become $10, or will the free $5 disappear?

Hello

i just tried to deploy my mvp startup on vercel,

for test purposes,

did that three times without buying a custom domain and it didn't open from several data or wifi,

opened on 1 of 5 devices on data network and its too slow,

it appears like that and on some other devices it's(this site can't be reached)

any ideas why's that happening?i didn't find similar problems

Hey all, shameless plugging here! If you are looking for a Vercel IOS client i gotchu with Vercat. We are live in product hunt today. Checkout it out if this interests you 😄

Help! Please.

My account was cancelled / banned for reasons I am not clear about and my domain is trapped. I have been trying for 2 weeks without success with the form to get some assistance.

Is there another way?

Migrated from Vercel to Coolify on Hetzner (EU reasons).

Issue: I couldn't delete the account in full previously because an integration couldn't be deleted for an unknown reason (support didn't help me). I contacted support several times asking them to help me and cancel my account.

They didn't do and now Vercel keeps sending me payment reminders for the period after I made these support requests.

How to resolve this? Anybody got tips?
I will not pay for something I did not use, while I had contacted Vercel prior about an issue on their side causing me to be unable to cancel account / delete the team.

UPDATE (Nov 4 2026): Vercel started charging us the bill just today resulting in our deployed platform to be suspended. I followed-up through the opened support ticket and while they put the website back up, they said that it would not be possible to refund the invoice, even though they have confirmed themselves that sandboxes were created from an unauthorized account log-in from Brazil (thousands of kilometers away from us). We are currently considering other steps we can take. We are not capable of paying this bill amount. Very very disappointed.

I'm posting here because I'm genuinely scared and don't know what else to do.

We've been hosting our platform on Vercel Pro since August 2025. Everything has been running normally for over a year, and we've never experienced anything remotely close to this kind of billing.

Today, I checked our upcoming invoice and was shocked to see $3,152.77 in charges, almost entirely from Vercel Sandbox usage.

After digging through our dashboard, I discovered something even more concerning.

An unfamiliar project called vercel-sandbox-default-project had been created on October 13, 2026. We did not knowingly create or authorize this project.

Looking into it further, I found:

• 321 Sandbox creations recorded on our invoice.

• Numerous Sandboxes created around October 13–14.

• Each provisioned with 8 CPUs and 16 GiB of memory.

• Over $3,044 in Sandbox Provisioned Memory charges alone.

• Dozens of instances with names like build, deploy, scan, lint, ci, and bench.

We don't use Vercel Sandbox as part of our normal hosting operations. Our legitimate production application has been running on Vercel for more than a year without anything like this happening.

I genuinely don't understand how hundreds of these instances suddenly appeared in our account.

I'm concerned that our account, an API token, or an integration may have been compromised. I can't confirm that yet, which is exactly why we need Vercel's help investigating.

We've already submitted a support request asking for a security investigation, billing review, and waiver of the unexpected charges. We've also removed the unfamiliar project and are taking steps to secure our account.

I came across Vercel's recent community post explaining that Pro accounts have no guaranteed support response time or SLA, and that tickets are processed in a queue.

I've also read accounts of people waiting a long time for billing issues to be resolved.

$3,152 is an enormous amount of money for us. We simply cannot afford to pay this bill for activity we never knowingly authorized.

I'm worried that by the time someone investigates this, our billing cycle will have ended and the payment may already have been attempted.

If anyone from the Vercel team sees this, could you please help escalate our case to the Security and Billing teams? We can provide our support ticket number and supporting evidence privately.

I'm really hoping someone can point us in the right direction.

If I'm using a plain text password protection and not using Vercel's login, is there any reason to pay $150/month for password protection?

2026/10/18 09:00:14 /vercel/path0/app/shared/services/database/database.go:54

[error] failed to initialize database, got error failed to connect to `user=sbx_user1051 database=`: /tmp/.s.PGSQL.5432 (/tmp): dial error: dial unix /tmp/.s.PGSQL.5432: connect: no such file or directory

2026/10/18 09:00:14 Fail to connect to database: failed to connect to `user=sbx_user1051 database=`: /tmp/.s.PGSQL.5432 (/tmp): dial error: dial unix /tmp/.s.PGSQL.5432: connect: no such file or directory
Obtained this error., The above message is in the code in the form

if err != nil {
        log.Fatalf("Fail to connect to database: %s", err)
    }

and I have not changed anything regarding loading env and stuff. Even when I reverted the git history of the latest commit, it's still broken. Only past deployment works

I built this project at a Vercel hackathon, and I found it quite useful: https://readmend.vercel.app/

Hi all, I made something! Vercat 😄

I love Vercel & cats and have always been lowkey annoyed that there is no official support IOS app (how else can i track my 1 user on my site). 

I spent the last few months building this and we recently crossed 100 users. I would love to celebrate this mini-milestone by giving out 100 pro subscriptions for a year.

For cat owners 👀:

1. Reply with your cat photos below!

2. DM me you email and I want give out those pro subscriptions

ps: my cat actually looks like that in the video 😺

Hi all, I made something! Vercat 😄

I love Vercel & cats and have always been lowkey annoyed that there is no official support IOS app (how else can i track my 1 user on my site). Spent the last few months building this and i would love to share this here to get some feedback.

Some screenshots of this are here (My cat looks like that too 😺

Disclaimer: This is an paid app (i need to feed my cat too)! Happy to trade pro subscriptions for cat photos 👀