This can most assuredly happen. The only requirement is that the order must be placed through your phone and your phone only. So somebody has to have physical access to your mobile phone in order to do it but, if that's possible, it can be done with almost no effort. Rest assured, though, that is exactly what you'really dealing with. It's called a Direct Carrier Billing code and they're issued by various carriers, designed mainly as a way for the younger generation on the go to easily transact small trades without the hassle that some would argue more traditional forms of payment might present. Designed as a matter of convenience more than anything else, really, once you have been positively identified the carrier will transact business with you whenever you like as long as it's "on the level". Orders placed, even when done so by a client able to positively identify themselves as a customer will only be honored when placed by your actual phone. It cannot be faked, either. Even if you tried to make the phone believe it belonged to another number they are extremely reliable in that they will always and without exception know their true identity. As far as I know this security measure is, at least thus far, impossible to defeat. That being said, the odds of you receiving a DCB code, from your carrier, for an electronic order placed by a complete stranger, and on a phone that wasn't actually yours are infinitesimal at best. Barring any cosmic SNAFU I have to think whatever was purchased was done so by someone using your phone. Really, the only way to do it would to be to acquire and use your phone, to the exclusion of any other, to place the order in question, and since we know it wasn't you, we can rely on the assumption that somebody used your phone, ordered "something", charged it to your mobile carrier account and, after they settled the bill, they passed the newly minted DCB code on to you. More than likely by way of SMS text message. But the fact remains that it simply cannot done from another phone it must be done through your phone. Period. That said, although I can't say whodunit, I can state with the utmost certainty that the dastardly deed was carried out with your own hardware. Hoist by your own petard, as it were. Any kids have access to your personal items that might have a penchant for goods and services acquired in a manner some people might think to describe as less than wholly legitimate? I'm sure not. Alas, such is the world. In all seriousness, though, just call the carrier and give them that DCB number. They should easily be able to tell you what was purchased, where, even what time of day it was. My gut feeling is that, since these purchases are typically small by comparison, they could very well just right it off in order to ensure your continued business. I hope that's been helpful. I really think that if a carrier is offering Direct Billing to their customers, especially if unsolicited, they should be certain the customer knows, first and foremost, what it is but also familiarize them with it's use in addition to offering suggestions as to how one can protect themselves against what happened to you. Good luck in the future.