Vodacom allowing unauthorised subscriptions

My son's Vodacom account has been debited with "Purchased Contect 2" since mid August. When querying we found it was a service called "Baseplay Max". We found a spammy SMS that says congratulations you have subscribed for a one day free trial, thereafter R15 per day. At the date and time of the so-called subscription my son was nowhere near his phone. Searching these pages tell me this is not an isolated incident. Shame on Vodacom for allowing this to continue on their billing system.