Money was withdrawn from the card for an application that was not used

Hello,

If you receive a phishing email or text message

Scammers try to copy email and text messages from legitimate companies to trick you into entering personal information and passwords. Never follow links or open attachments in suspicious or unsolicited messages. If you need to change or update personal information, contact the company directly.

These signs can help you identify phishing scams:

• The sender’s email address or phone number doesn’t match the name of the company that it claims to be from.
• Your email address or phone number is different from the one that you gave that company.
• The message starts with a generic greeting, like “Dear customer.” Most legitimate companies will include your name in their messages to you.
• A link appears to be legitimate but takes you to a website whose URL doesn’t match the address of the company’s website.*
• The message looks significantly different from other messages that you’ve received from the company.
• The message requests personal information, like a credit card number or account password.
• The message is unsolicited and contains an attachment.

*To confirm the destination of a link on your Mac, hover your pointer over the link to see the URL in the status bar. If you can't see the status bar in Safari, choose View>Show Status Bar. On your iOS device, touch and hold the link.

From:

Avoid phishing emails, fake 'virus' alerts, phony support calls, and other scams - Apple Support

Additionally this article may help:

If you see 'itunes.com/bill' or an unfamiliar charge on your bank, credit card, or debit statement - Apple Support

Purchases are considered final but you could try the 'report a problem' page to contact iTunes Support and see if they will refund or credit you as a one-off : http://reportaproblem.apple.com

Or you can try contacting iTunes Support via : https://support.apple.com/contact or https://www.apple.com/emea/support/itunes/contact.html