StoreKit 2 App Store Server API
StoreKit 2, Part 3: Server-Side Receipt Validation in 2026 (App Store Server API)
Day 17 of the 30-day iOS series, the finale of three on monetization. You can't trust the client — here's the minimal App Store Server API workflow for BrewLog: Server Notifications V2, JWSTransaction decoding, a Cloudflare Worker, and three pure Swift tests that prove the entitlement logic without ever calling Apple.
13 min read
StoreKit 2 Subscription Fraud
iOS Refund Abuse Has a TikTok Tutorial Now. Your Client-Side Receipt Check Is the Cashier Who Looks Away.
Subscription refund fraud quietly climbed past 11% on iOS in 2026, fueled by TikTok scripts and a 90-day Apple refund window most indies never reckoned with. Client-side receipt verification can't see any of it — and the gap between StoreKit's ‘.verified' and what your business is actually owed is now too big to ignore.
11 min read