I would not recommend going through the company to get your money back. This usually leads to dead ends, being on hold forever, etc.
The way to get your money back is to go through your bank/credit union. There are rules set in place by NACHA (National ACH Association) that protect consumers like yourself from these types of scams. All you need to do is go to your bank/credit union and fill out a Written Statement Under Penalty of Perjury. This form states that you never authorized IDOnLock to take money from your account. Once you have signed this form, your bank/cu MUST put a stop on EVERYTHING from IDOnLock, refund your money that was sent to them, PLUS any NSF charges you may have incurred.
The only catch is the debits have to be within the past 60 calendar days from when you file the complaint.