This is one of the worst stories I’ve seen yet. It sounds like they were “all in” on Apple with zero backups, which shows some questionable judgment, but still, this sort of thing shouldn’t be possible any more than a bank deciding to take all your money with no recourse. (They can close your account, but they can’t keep your money.) Maybe hosts should be required to mail you a hard drive with your data on it when they close your account. Regardless, never assume cloud data is in safe hands.
I have had an apple id problem myself, for the past N years. Mine is an old mac.com account, which has my Gmail address as the backup email (and the primary one now that mac.com isn't doing email anymore). Because of this, I cannot sign up for a new account with my Gmail (it is tied to the older mac.com account).
I've managed to reset the password, but I must answer a security question to log in. I mean, I answered those security questions probably a decade ago and I do not know what they are anymore. You can reset your security questions, but to do that you need to use an iPhone (last one I owned was a 4) that is still logged in, or, answer a security question. Which is as we established, the problem.
So every couple of months I log in, try a few other possible answers, get them wrong, and get locked out for a bit.
Anyway, I need to get this fixed my march, due to apple being the formula one streamer in my country now, so I have to actually solve the problem of logging in to my apple account. Or, I guess, making another random email just so I can watch f1. Sigh.
But if anyone knows how to reset security questions, I'd love to know. I would way rather pay apple actual money than go back to torrenting the races.
If Apple engineers read this: I can't sign in into my iCloud account from my android phone, it just doesn't work, meaning I can't manage my subscription like HBO now that I switched to an android phone.
PS: My plan is to wait for Apple to release a folding iPhone to move back!
Since your money is gone, I would file a complaint here:
ACCC (Australian Competition and Consumer Commission): The primary enforcer of gift card laws, ensuring businesses comply with the three-year minimum expiry, clear terms, and fair practices.
Send this in an e-mail to tcook@apple.com. He has a team that reads for stuff like this and can magically fix issues.
I've had to do it before, also for a gift-card-related problem (different from yours), and I was contacted by a member of the Apple executive escalations team a couple days later.
Getting a special "notice me on social media (like HN)" fix won't actually fix the problem with using Apple's systems. It's just a temporary reprieve until some other aspect of their control of one's life breaks (by accident or indent).
Wow. This is a cautionary tale. I don't think I'd be as devastated as this poor chap, but as it grew I realize I've allowed my iCloud photo library to become a single copy.
How are people handling this these days? If i wanted to ensure a full backup of everything on my iCloud to a NAS, what's the best way these days? Seems like they make it difficult by design..
It's just insane that a gift card redemption can trigger this. What's the rationale? It would make more sense if they just locked the person out of redeeming gift cards or something, not the entire account.
But reading horror stories like this is is why I only use the very bare minimum of any of these cloud services. Keep local copies of everything. For developer accounts, I always create them under a separate email so they're not tied to my personal. At least it can minimize the damage somewhat.
It sucks that I have to take all these extra precautions though. It's definitely made me develop a do not trust any big corp mindset.
Gift cards carry a surprisingly high fraud/AML risk.
If a code ends up being part of a stolen-card → resale → redemption chain (which is more common than people think), companies like Apple may actually have to lock the entire account.
So the trigger might not be arbitrary—it may just be a side effect of how risky gift-card-based payments are.
No to excuse Apple but I think anti money laundering laws are at least partially to blame - they vary from country to country but typically impose penalties for not blocking suspicious activity at the same shielding from lawsuits for blocking innocent users. It's like lawmakers found a way to throw due process out of the window.
The rationale is that an egregore called Apple, inc. is blindly fumbling ahead, unable to see the lives it is trampling.
Note that this has nothing to do with the actual well meaning (mostly - see leadership emails leaks) people forming the egregore.
The purpose of the company structure is isolating it from liabilities, and as the regulation which would force it to recognize the damage it did is mostly missing, thus the outcome.
from the reddit story: "In the past two months, I purchased eleven Apple Gift cards from Amazon, Target, and apple.com, and added the amounts to my Apple account. The gift card amounts ranged from $25 to $150 each, totalling $905."
This is literally a money laundering pattern
The question will be why isn't this person just adding the money to their account directly, where is this money coming from, why are they structuring it like this
To paraphrase an old saying: Live by Big Tech, die by Big Tech.
After nearly 30 years as a loyal customer
I've heard others say this (and was a "loyal advocate" of Windows for around 2 decades myself), but the reality is they simply do not care. You are merely a single user out of several billion.
Many of the reps I’ve spoken to have suggested strange things
That almost sounds like some sort of AI, not a human. But if I were in your situation I'd be inclined to print out that response as evidence, and then actually go there physically to see what happens.
There was a time when I accidentally deleted some photos of which I had only one copy. I blamed myself for being stupid not having a copy but also money was tight for additional drives.
Then there is this: depending on a service provider and then blaming them for something like this. The problem is that now you are losing trust in service providers (of which there should be little to begin with) and on top of that you are also blaming yourself for depending on them. However you have to create a trust model where your fault allows you to have a service helping you with it while a fault at the service provider will allow you to restore data from your end too, getting the best of both worlds.
MacOS and Windows / Google with always logged in systems that lock you out completely at their will is an example of how your devices are not owned by you to begin with and then trusting them with your data as well means your digital life is basically owned by them completely.
Now imagine that there are no humans to solve this but endless LLM bots that respond with generic responses because the LLM has never seen a problem like this. I want to point out that owning your data and hardware is really important if you depend on it and your business especially does.
It’s also possible this person does have some personal or external backups of stuff like the photos, but they’re not going to mention it here as the existence of those doesn’t change the fact that they’ve been extremely wronged. It also won’t help with their developer account etc.
This happened to me really early on when my original Apple ID had an invalid format, as it was an ID made prior to the current version of Apple ID everyone uses, and Apple refused to port what I owned to the ID that I was forced to generate to sign into my newer device. My old ID had software no longer available in App Store, so this wasn’t just a matter of needing to repurchase apps- they were taking away my ability to use applications I bought from them. Since then, I’ve been incredibly wary of losing my Apple ID. I have a lot of respect for Apple, but I would bet that it’s easier to deal with ID related problems for someone with Q level clearance in the U.S. government or even a non-existent Men In Black ID problem than to resolve a problem with an Apple ID. They probably would tell the almighty to get a new ID.
175 comments
[ 4.1 ms ] story [ 70.3 ms ] threadI've managed to reset the password, but I must answer a security question to log in. I mean, I answered those security questions probably a decade ago and I do not know what they are anymore. You can reset your security questions, but to do that you need to use an iPhone (last one I owned was a 4) that is still logged in, or, answer a security question. Which is as we established, the problem.
So every couple of months I log in, try a few other possible answers, get them wrong, and get locked out for a bit.
Anyway, I need to get this fixed my march, due to apple being the formula one streamer in my country now, so I have to actually solve the problem of logging in to my apple account. Or, I guess, making another random email just so I can watch f1. Sigh.
But if anyone knows how to reset security questions, I'd love to know. I would way rather pay apple actual money than go back to torrenting the races.
PS: My plan is to wait for Apple to release a folding iPhone to move back!
ACCC (Australian Competition and Consumer Commission): The primary enforcer of gift card laws, ensuring businesses comply with the three-year minimum expiry, clear terms, and fair practices.
I've had to do it before, also for a gift-card-related problem (different from yours), and I was contacted by a member of the Apple executive escalations team a couple days later.
How are people handling this these days? If i wanted to ensure a full backup of everything on my iCloud to a NAS, what's the best way these days? Seems like they make it difficult by design..
That‘s always the most kafkaesque part of these problems and should be illegal
But reading horror stories like this is is why I only use the very bare minimum of any of these cloud services. Keep local copies of everything. For developer accounts, I always create them under a separate email so they're not tied to my personal. At least it can minimize the damage somewhat.
It sucks that I have to take all these extra precautions though. It's definitely made me develop a do not trust any big corp mindset.
Note that this has nothing to do with the actual well meaning (mostly - see leadership emails leaks) people forming the egregore.
The purpose of the company structure is isolating it from liabilities, and as the regulation which would force it to recognize the damage it did is mostly missing, thus the outcome.
See also https://www.ribbonfarm.com/2010/07/26/a-big-little-idea-call...
This is literally a money laundering pattern
The question will be why isn't this person just adding the money to their account directly, where is this money coming from, why are they structuring it like this
After nearly 30 years as a loyal customer
I've heard others say this (and was a "loyal advocate" of Windows for around 2 decades myself), but the reality is they simply do not care. You are merely a single user out of several billion.
Many of the reps I’ve spoken to have suggested strange things
That almost sounds like some sort of AI, not a human. But if I were in your situation I'd be inclined to print out that response as evidence, and then actually go there physically to see what happens.
There was a time when I accidentally deleted some photos of which I had only one copy. I blamed myself for being stupid not having a copy but also money was tight for additional drives.
Then there is this: depending on a service provider and then blaming them for something like this. The problem is that now you are losing trust in service providers (of which there should be little to begin with) and on top of that you are also blaming yourself for depending on them. However you have to create a trust model where your fault allows you to have a service helping you with it while a fault at the service provider will allow you to restore data from your end too, getting the best of both worlds.
MacOS and Windows / Google with always logged in systems that lock you out completely at their will is an example of how your devices are not owned by you to begin with and then trusting them with your data as well means your digital life is basically owned by them completely.
Now imagine that there are no humans to solve this but endless LLM bots that respond with generic responses because the LLM has never seen a problem like this. I want to point out that owning your data and hardware is really important if you depend on it and your business especially does.
In the past people have emailed Tim Cook directly - his email id is fairly easy to find.
Edit: "I have escalated this through my many friends in WWDR and SRE at Apple, with no success."
This doesn't bode well.
you can in the meantime, and for the future, try compartmentalizing services you use. the old saying of "all eggs in one basket" applies here as well.
VPS, hard drives, etc. are cheap and keep you more in control of your own data than you're with big tech.