Hi mate - would contact customer service via the in-game settings menu as they will be able to assist with verifying purchases made etc. and potentially with seeking a refund (not entirely sure on that, but they would be the ones to ask).
As for purchases on the iphone, yeah, i have to double click the side button every time i buy something, but i don't know that i need to face id every time as well ... that is an apple thing though, the game just takes verification from apple in whatever form apple provides, but yeah, it poses an interesting conundrum.
contact customer service though, tell them you had unauthorised purchases in the game, and they may be able to roll them back and refund you
