Why was a purchase allowed without my Roku account PIN?
A purchase could have been made without your Roku® PIN for a few reasons:
If you have more than one Roku account and more than one Roku device, you may have a PIN set up for one Roku account or streaming device but not for all of them. That means someone could have made a purchase through one of your accounts or devices that doesn't have a PIN set up.
To keep track of purchases, parental controls, and other important information, Roku recommends linking all Roku devices to one Roku account so that you don’t have multiple accounts. With one Roku account, you can also sync multiple devices so that channels installed on one device are automatically added to all the others.
Subscriptions purchased directly through a streaming service provider, such as Netflix or Amazon Prime Video are not protected by your Roku PIN. Your Roku PIN only allows you to control purchases made through Roku.
You can determine which subscriptions are billed directly through Roku Pay by reviewing charges to your Roku account. Many channel providers offer additional ways to protect you from unauthorized purchases: contact the channel provider directly to learn more.