My friend has complained her sons iphone got hacked and racked up a bill of £500,?

Not sure how but apple have said that its past the 30 day period which you can challenge it and are threatening to send bailiffs over. They have been to citizens advice bureau and they say that if the contract says 30 days there's nothing they can do. Apparently it came from russia

When I buy anything off google play it takes it direct from my credit card, and if that had been the case with them it would have been declined as they are very poor. I'm surprised apple can do this

She should complain to OFCOM.org in the UK

She could try talking to sorneone in cyber crirne about it

So your friend's son downloaded a virus in some app that he put on his phone that allowed someone to take control of his device. This really is not Apple's problem. If he does not know how to safely use a smart phone, he is too young to have one.

Moral of the story is never download 'free' apps and do not to store any credit card details on apps connected to your phone. Best never to buy things from your phone in the first place.