He does not blame Google but believes the cheaper apps are designed to make money by offering in-app purchases. Many apps can be downloaded at no cost but players are lured into spending money to advance in games.
Toby made about 60 transactions over two hours in total, Bolster says.
The mistake was made primarily because the password request had been disabled.
"He either figured out the password or the password request was somehow disabled. I have no idea how that happened."
Bolster has received a prompt reply after emailing Google details of the boy's mistake.
"I got a fairly human response. They are not obliged to refund the transactions but they are looking into it and have asked me to send though the transaction numbers."
He says Toby is too young to understand the gravity of what he's done. "$24.99 means nothing to a 6-year-old, let alone $24.99 times 10."
"It's a life-defining thing, how we handle this as a family.
"I wasn't casual with him, but he did tell me the truth when I asked him and he knew he'd done something wrong."
Meanwhile, the password protection is back on and Dumper says there will be new rules about how much Toby can use the tablet.