I guess my account got pwned.
They asked how I'd pay for these - $900 worth I think - since I didn't have a valid card in their system (the previous one expired since I last used Packet). I told them to stop the VMs and allow me to reset my credentials. I also asked them to investigate their logs and geolocate all the users that logged into my account. I was also curious they actually let someone log into the account from a new IP (without notifying me) and also allowed them to run instances without a valid card.
They blocked my account, which also blocked this support thread. So I started a new thread from an alternative e-mail address to resolve the issues.
I never heard from them again.