Myth: device-ID reset fraud died with IDFA deprecation
'ATT killed the IDFA, so DeviceID reset fraud is dead.' Comforting and wrong — it just moved house.
DeviceID reset abuse (resetting the ad ID to look like a fresh install) was an iOS IDFA play. On Android the GAID is alive and reset fraud is thriving. And on iOS the fraud migrated to SKAN-layer attacks: source-app spoofing and conversion-value manipulation. The technique didn't die, the surface shifted.
✓ iOS user-level reset fraud is genuinely reduced
✓ ATT cut off the easiest device-graph abuse on Apple
✗ Android GAID reset fraud is bigger than ever — most volume is there
✗ iOS fraud relocated to SKAN postback and source-app spoofing
Don't declare victory off your iOS dashboard. Run your fraud SDK on Android with reset-frequency checks, and validate SKAN source-app IDs against an allowlist.
Verdict: defend Android reset fraud and iOS SKAN spoofing — the threat relocated, it didn't retire.
Best for: teams that mothballed device-fraud checks after ATT.
In-App Bench
@InAppBench
Myth: device-ID reset fraud died with IDFA deprecation
Этот пост опубликован в Telegram-канале In-App Bench. Подписаться можно по ссылке: @InAppBench.