How can Free users contact Cloudflare support after account hacked?
My Cloudflare account was taken over. Two unauthorized domains were registered, and eight additional domain-payment attempts were blocked by my payment provider.
I had previously connected Cloudflare’s MCP server with full write access. I suspect it may have been involved, so I removed it and secured the account.
I emailed the address Cloudflare provided (registrar-abuse @ cloudflare dot com) , but they replied that it does not accept these reports and redirected me to the abuse form. The “Submit a case” section gives Free users no way to enter custom text explaining an account takeover.
This is not simply a billing issue. I need to report the takeover, confirm my account is secure, void the unpaid invoices, and request refunds for the two unauthorized charges.
How can I contact the correct Cloudflare security or Registrar team? Contacting Cloudflare is my main problem.
EDIT: I want to clarify that I have access to the account, I did all security stuff (all the ones I know: reset password, activated 2fa, removed all backdoors he kept, revoked mcp and all tokens and activated some ddos attack protection rules because I also found unusual traffic.). and the only remaining problem is having them listen to me somehow to report this incident and also get a refund. I couldn't raise a case and email communication is not working.