non-NCR and POPI compliance

My mom cancelled her Vodacom contract via the phone at the Vodacom store in Mall of the north in Polokwane on the 13th of July. We were advised that a new contract on her number could only be accommodated after 30 days. True to form roughly 24 days later I called Vodacom online requesting to take out a contract on my mother’s number using my bank account details as I will now be liable for the account. A affordability/credit check was performed and I was granted the contract for 200mins and 2 gig top-up. On Friday my mom advised me that her bank account was debited for an amount equivalent to my contract payable amount. I thus have the following questions: 1. Who authorised the contract reactivation? 2. Why was an affordability/credit check performed on me if the contract is not in my name? 3. Was an affordability/credit check performed on my mom (a pensioner) to verify affordability? 4. Who authorised my mom’s account being debited? Where is that mandate?