In-App Purchases Are Compromising Children’s Online Safety and Privacy

With more young people gaming during school holidays, parents should be aware that cybercriminals may also use online gaming as a platform to access data, which can compromise both the child’s and parents’ personal information.
Children are increasingly spending time on apps that often encourage in-app purchases, especially during school holidays. PHOTO: Freepik Children are increasingly spending time on apps that often encourage in-app purchases, especially during school holidays. PHOTO: Freepik
Children are increasingly spending time on apps that often encourage in-app purchases, especially during school holidays. PHOTO: Freepik

As online gaming grows in popularity, children are increasingly spending time on apps that often encourage in-app purchases, especially during school holidays. While these purchases can enhance the gaming experience, they aren’t without risk says Carey van Vlaanderen, CEO of ESET Southern Africa.

Many online games operate on a ‘free-to-play’ model, promising an engaging experience with no upfront cost. However, as children progress in these games, they are often tempted to make in-app purchases to unlock extra benefits and progress faster. These transactions often involve virtual currencies like gems or stars, which must be purchased with real money. This can lead young players to lose track of the financial implications of their gaming.

Carey van Vlaanderen, CEO of ESET Southern Africa. FILE PHOTO
Carey van Vlaanderen, CEO of ESET Southern Africa.

“In-app purchases are designed to be seamless, making it difficult for children, and sometimes even adults, to resist spending. The excitement of the game, coupled with enticing offers and virtual rewards, can make it easy to overlook the financial consequences,” said van Vlaanderen. “More importantly, these purchases also provide a potential entry point for cybercriminals to exploit personal information.”

Consumer spending on app stores is expected to reach USD$200 billion (approx. UGX735.5 trillion) by 2025 with in-app purchases forming a significant portion of that revenue.

With more young people gaming during school holidays, parents should be aware that cybercriminals may also use online gaming as a platform to access data, which can compromise both the child’s and parents’ personal information. “Whatever screen limits you decide on, kids should not be left unsupervised online, especially during the long year-end holiday period when scammers and criminals are well aware that youngsters are online and prone to boredom,” advises van Vlaanderen.

How cybercriminals use in-app purchases for identity theft

  • Phishing and social engineering

Cybercriminals often create fake in-app offers that appear enticing to users. When clicked, these offers can redirect users to fraudulent websites where personal details, including payment information, are collected. This data is then used for identity theft.

  • Malicious apps and updates

Fraudulent apps masquerading as legitimate games may collect personal information through hidden malware. “These malicious apps often come with fake reviews and ratings to make them appear credible,” notes van Vlaanderen. “Parents should exercise caution when downloading new games, ensuring that apps are from reputable developers.”

  • Exploiting in-app payment systems

During in-app purchases, users are often prompted to enter payment information. If these payment systems are not adequately secured, cybercriminals can intercept the details which are later used for fraudulent purchases elsewhere.

Also read:

Key strategies to creating a safer digital experience

  • Control purchase options

Parents can control in-app purchases by disabling them through device settings. For example:

    • On iOS devices, navigate to Settings > Screen Time > Content & Privacy Restrictions to block in-app purchases.
    • On Android devices, use the “Purchase Approvals” feature in Google Play to manage and approve transactions.
  • Monitor subscriptions regularly

Keeping track of subscriptions helps parents spot any unexpected or unauthorized charges.

  • Utilise comprehensive security solutions

Security tools like the ESET Parental Control App allow parents to manage in-app purchases, block inappropriate content, and protect children from threats on their devices. The ESET Home Security Ultimate solution also helps secure digital activities by removing metadata from shared images, reducing the risk of personal data being exposed.

Parents should first contact Apple or Google to request a refund if a child makes an unauthorized purchase. Both platforms offer dedicated support for reversing such transactions. Sometimes, the app developer may also need to be contacted to assist with the process. “Explaining that the purchase was made by a child without permission can improve the chances of a refund,” van Vlaanderen adds.

While there are risks associated with in-app purchases, many apps offer great benefits for kids. When used responsibly, digital devices and games can be educational, inspiring, fun, and safer for young people.