Forensic Analysis of the iOS Apple Pay Mobile Payment System

Mobile payment systems enable users to complete financial transactions with their smartphones, including contactless payments at retail stores. Because the financial transactions of individuals are indicators of their lifestyles, they are potential sources of data in criminal investigations. The items purchased and even the locations of transactions can constitute valuable evidence. However, mobile payment system data is intended to be interpreted by computer software not human investigators. As a result, a barrier exists between raw application data and their clear interpretations for evidentiary purposes.This chapter describes research focused on Apple Pay, the leading mobile payment system for mobile debit wallet transactions in the United States. The research has sought to examine the Apple Pay mobile payment system and identify specific sources of forensic artifacts. This includes determining and interpreting the payment card and transaction data residing in the Apple Pay application and syncing across user devices, as well as the implications of deleting Apple Pay application data.