Ask HN: Do ISPs charge overage fees for DDoS on capped service

A virtual friend of mine has a capped internet connection. She would like to host some services, but is concerned with paying overage fees should she come under DDoS. Does anyone know how ISPs handle this?