According to court documents part of a 2012 class-action lawsuit made public by a federal judge at the request of The Center for Investigative Reporting’s Reveal, social network giant Facebook has made a habit of charging kids without their parents’ knowledge while playing games on its platform. This happened because, unlike other platforms such as Apple’s iOS, Facebook will not require its users to re-authenticate every time they want to purchase in-game goods such as virtual currency. The lead plaintiff in the case was a child who used his mother s credit card to pay $20 while playing a game on Facebook.
Source: https://www.bleepingcomputer.com/news/security/facebook-caught-red-handed-while-swiping-money-from-children/