Apple Now Including Unique Identifiers for In App Purchase Receipts to Combat Hack - MacRumors
Skip to Content

Apple Now Including Unique Identifiers for In App Purchase Receipts to Combat Hack

in app purchase iconFollowing last week's launch of a hack that allowed users to obtain In App Purchase content free of charge by routing their purchase requests through a server run by a Russian hacker, Apple began taking steps to thwart the method. The hacker has, however, continued to develop his method to skirt around Apple's roadblocks.

One of the suggestions for a method by which Apple could improve the security of In App Purchasing was to include a unique identifier in validation receipts, and we've received word that developers are now seeing something along those lines coming from receipts issued by Apple since late yesterday. The receipts carry a new field called "unique_identifer" that appears to include the Unique Device Identifier (UDID) for the device making the In App Purchase.

As one developer noted to us, apps are no longer supposed to be collecting the UDID and thus it is unclear whether Apple's use of the identifier for this purpose is simply a first step toward a broader implementation of unique receipt identifiers for increased security or if Apple is attempting to identify those users and devices who are sharing their receipts with the Russian hacker to allow the method to function.

Popular Stories

iPhone Handoff Feature

iOS 27 Introduces New 'iPhone Handoff' Feature

Wednesday September 2, 2026 12:35 pm PDT by
Apple has added a new "iPhone Handoff" feature to iOS 27 that will allow you to switch between two iPhones while using the same phone number on each device. This functionality was briefly mentioned during the WWDC 2026 keynote in June, on a slide that listed hundreds of new features coming in iOS 27 and corresponding software updates, but Apple never shared any further details at the time. ...
Dynamic Island iPhone 18 Pro Feature

iPhone 18 Pro Prices Estimated Ahead of Apple Event Next Week

Thursday September 3, 2026 3:41 am PDT by
Less than a week before Apple debuts new iPhone 18 Pro models, research firm TrendForce has estimated the prices of the devices based on the latest hardware cost environment. TrendForce's price estimates compared to last year's models look like this: Model Starting Price Model Starting Price Change iPhone 17 Pro $1,099 iPhone 18 Pro $...
Apple Foldable Thumb

iPhone Ultra's Very High Price and Features Revealed in New Report

Thursday September 3, 2026 7:33 am PDT by
Ahead of Apple's event on Wednesday, September 9, where it is expected to unveil its first-ever foldable iPhone, Taiwanese research firm TrendForce today outlined the device's estimated price range, features, and some other key details. In the U.S., TrendForce estimated that the foldable iPhone will have a starting price of $2,099 to $2,299 and said the highest-end configurations could...

Top Rated Comments

184 months ago
Mulitple devices/replacement devices

How will this impact those of us that have an iPad and an iPhone? Will we be required to pay for the app 1 time, but the in-app stuff twice?? :confused::confused::confused:
Score: 12 Votes (Like | Disagree)
roland.g Avatar
184 months ago
Maybe a UK judge can require the hacker to include the text "this receipt is a copy of a legitimate and cool receipt" for the next 6 months on all receipts and on his website.
Score: 11 Votes (Like | Disagree)
184 months ago
It's a shame that Apple even needs to do this. The world we live in today...
Yes. The world we live in today is almost unbearable. All these wars of opportunity complete with extrajudicial killings funded by casino capitalism. While a naive self-absorbed population frets endlessly about... pirated software? What a shame indeed.
Score: 8 Votes (Like | Disagree)
iSee Avatar
184 months ago
I thought we won the cold war! But now Russia is crushing our corrupt capitalist country, just like they said they would!!! ;)
Score: 5 Votes (Like | Disagree)
184 months ago
It's a shame that Apple even needs to do this. The world we live in today...
Score: 5 Votes (Like | Disagree)
Rudy69 Avatar
184 months ago
As one developer noted to us, apps are no longer supposed to be collecting the UDID and thus it is unclear whether Apple's use of the identifier for this purpose is simply a first step toward a broader implementation of unique receipt identifiers for increased security or if Apple is attempting to identify those users and devices who are sharing their receipts with the Russian hacker to allow the method to function.
They might allow developers to use it to check if the purchase is valid. There's a huge difference between that and developers using it to track users and possibly logging these IDs on their own servers
Score: 5 Votes (Like | Disagree)