The scammer created the account on google cloud using my google account and attached credit card. To be more clear my credit card was not charged. One day before Boniowice came Google block my credit card for payment with following explanation
"Due to suspicious activity, we suspended payment options for products and services using this account to allow unauthorized activities" So I was not charged yet, but I received invoice to pay with information that it will be done automatically.