I also got hit. Called Maxis and they told me to send STOPALL to the shortcode.

Basically, its MO spoofing. Much like credit card fraud except there is no paper trail to actually determine whether you made the request or not.

Furthermore, they can't or dont want to refund because imagine if everyone (including those who requested for the services) start calling up and claim its fraud.