Hello, my OpenAI API key was apparently compromised and used by an unauthorized third party (OpenClaw-related activity). I immediately revoked the key, changed my password, and opened a support ticket with all the evidence.

The issue is now under review, but my API account is currently unusable due to an “exceeded quota” / billing error caused by the disputed charges.

I run a production SaaS platform, so the API outage is having a significant impact on my customers.

Has anyone experienced a similar situation? How long did OpenAI take to review the case, and is there any way to restore API access while the investigation is ongoing?

Thank you.

Hi and welcome to the developer community.

First of all: keeping your API key save is your own responsibility.

“I run a production SaaS platform, so the API outage is having a significant impact on my customers.” << this is therefor only interesting to you.

secondly: could you put the support ticket number here? This might be useful because it allows OpenAI stuff to look into it.

dad June 26, 2026, 2:37am 3

It’s standard operating procedure across all businesses to disable access to services in the event of excessive outstanding bills/balances of all kinds–even if those charges are being disputed.

If it’s just a quota issue, it’s likely it will resolve itself through the normal course of time pushing you into a new accounting window, which will probably happen before the underlying issue is resolved.

If it’s a case of burning through your API credit, then you won’t have access restored until your available balance is positive again, which you can do by simply putting more funds in and hoping that OpenAI eventually refunds you some credit. You won’t get the money back as cash, but it’ll all balance out eventually in the end.

It is also standard procedure that services like that are charged extra.

Beside that .. there is a possibility to set warnings.

https://platform.openai.com/settings << there is a tab “Limits” - for projects

https://platform.openai.com/settings/organization/limits << and here for organisations