I’ve been billed for things I didn’t buy.

See the following instructions. They include information on contacting Apple Support if the other steps don't help: If you see "apple.com/bill" or an unfamiliar charge on your statement - Apple Support

If the only indication of the charges is from an email or text, be aware that it may be a phishing attempt to get you to log in to a site that appears to be Apple and divulge your password or credit card information. See: Recognize and avoid phishing messages, phony support calls, and other scams - Apple Support

and Identify legitimate emails from the App Store or iTunes Store - Apple Support