So of course people thought that when they changed jobs, cable companies, or whatever... they needed to create a new Apple ID with their new E-mail address. This was reinforced when Apple further stupidified their policy by requiring your ID to be a WORKING E-mail address (originally it didn't actually have to work).
After the outcry over people's App Store and other purchases being scattered across multiple IDs, Apple finally publicly and huffily declared that they weren't going to fix the problem they created by letting people consolidate accounts.
The moral: Don't force people to use E-mail addresses as user IDs. It's stupid on several levels.
They somewhat changed that. It now is possible to move purchases between accounts. See https://support.apple.com/en-us/117294. Looks quite cumbersome to do, and will not apply to everybody (“If an Apple Account is only used for making purchases, those purchases can be migrated to a primary Apple Account to consolidate them.”, “This feature isn’t available to users in India.”)
The real downside is if you have two fully active Apple IDs. Then things like calendars, photos, email, etc are still stuck on the other account until you export it. Which can be a pain since you have to sign out of your main account, sign into the old account and export, then sign back into the main account.
I haven't transferred the purchases or anything either. The two Apple IDs have different purchases on them, and those on Family Sharing are able to access both.
I use both for quite a few things. Which one is "primary?"
This belief is rampant amongst 90% of the general public. I had to spend an hour helping a friend last week who had created a new Cash App account to do their taxes, because they didn't prefer the old email address that was on their longstanding Cash App account. So now they have to keep 2 Cash App accounts forever. And to make things more fun, they're obsessed with phone numbers there, so adding the phone to the second account pulls it off the other account.
Oh, and digression but I have to vent: their login process on the web is, in some order: an SMS to your phone, another numeric to your email, and your password. All in succession, on every login.
This is also why using E-mail addresses as user IDs is monumentally stupid: People will think that they need to use their E-mail password, too. So now any entity with this ID policy becomes a gatekeeper not only to their own site or service, but the user's E-mail account.
One poor security regime or disgruntled employee at one obscure Web site can now enable identity theft on a grand scale, by exposing E-mail addresses and passwords.
There's a reason that banks and brokerages don't employ this ignorant policy. It's disappointing that Apple set such a poor example by implementing it. Then they had to run around trying to mitigate the harm with 2FA and other measures, after high-profile "hacking" attacks on journalists and celebs.
I basically need two Apple IDs because switching the region for your App Store is very inconvenient if you have any subscriptions.
In the end, I have separate Apple IDs for each country.
I traveled to Australia and got a local SIM. Suddenly every incoming call was from an unknown caller, even though every one was in my address book. Apple is too stupid to handle international calling in the 2020s. I mean... WTF?
Then again, this is the same company that "helpfully" changes all your calendar appointment times when you travel to a different time zone... with NO WAY TO PREVENT IT. So if you go east, you're going to miss any events you set up in advance... including flights home.
Ironically they then relented only for India and China because market share too sweet, so all auth developers now need to update the assumption that Apple auth users have an email address. Worst of both worlds :)
However, for your purpose of avoiding Apple's capricious BS, I probably wouldn't go that route since if their braindead fraud systems or braindead employees decide you're a threat actor they could definitely default to "Ban account. Find all their evil backup accounts that have the same phone numbers or contact emails and ban them too."
When encountering this, I updated the device which bricked the appstore, the device has to be fully reset if that happens.
Is there any evidence of this happening with an actual legitimate gift card and bot one which was stolen or originally purchased via credit card fund.
When Cyberpunk 2077 came out, my wife bought it with her credit card and gifted the game to me. It was fine at first. I even managed to play through the game. However when coming back to the game a few months later (to see all the bugfixes), it was gone. I contacted the (gog) and they said it was removed due to automatic fraud detection and that the balance had been paid back to the original credit card (my wife's card, she had obviously not noticed this in her bank statement).
Point being automatic fraud detection systems can wipe out stuff you purchased even months after the fact (or in some cases lock your account)... It feels kafkaesque.
> The card was purchased from a major brick-and-mortar retailer (Australians, think Woolworths scale; Americans, think Walmart scale)
This is the important quote showing that the gift card was not legitimate.
i would be surprised if there's any company with millions of users where .01 or .001 (still a LOT of users) just get screwed with zero recourse
