It was via credit card, but it was a smaller site I'd never heard of (I'm into music but not enough to know this place..maybe they're legit and I just didn't spend enough time doing research) and I was weighing the responsibility of thanking the artist the cost of buying a single track on a fairly "random" site and watching my credit card like a hawk for a month. It wasn't worth it to me in the end, ultimately. Typing this out, it seems a bit harsh, but I think a lot of consumers go through this same mental process. When I wrote an ebook, I put it both on Amazon and through a Shopify-type store where people could buy the DRM-free version. 99% of those people chose Amazon, and with good reason.
That is simply because most people have their credit card info saved in Amazon already. And people are lazy.
And yeah I would be reluctant to use my credit card on a shady looking website but I don't even think twice about using my card at shady looking businesses. For example, just last week, I bought tacos from a taco stand inside gas station.
Was site shady looking or just unknown? For me as long as site has valid certs & professional UI, I am usually fine with it. Also if you are using credit card, you are not liable for any fraudulent charges.
Digital compared to physical is no comparison at all. A physical shop incurs physical consequences - like people knowing where you are, where your address is, and being able to say "it was over there".
EDIT: And credit cards still require you to reasonably show the charges are fraudulent, which means hey, you get to report it. And now you're out a credit card, so you also need to change it on all the places you need to use it.
Anecdotally, I got my credit card frauded 3 times over the span of 4 months a couple years back. I started reviewing sites I'd purchased with online wondering where my details might have been leaking out. Lo and behold, a local store nearby had their POS systems hacked. It took a quorum of local people on reddit to identify that it was this store in particular. My point is physical locations are just as insecure as websites and in fact it's usually a lot less obvious than remembering that sketchy website you bought an MP3 from and never going back.
In all cases it was also my credit card company that called me to let me know I was the victim of fraud on my card. Is it really the case that people need to hawk their accounts? I haven't had that experience for years now.
