Researchers found 282 out of 444 AI chatbot apps for iPhone exposed payment credentials through insecure coding practices.
A recent investigation into artificial intelligence applications available on Apple's iPhone platform uncovered a widespread security problem. Researchers examined 444 different AI chatbot programs and discovered that approximately 282 of them—roughly 64 percent—were storing and transmitting sensitive information in ways that hackers could easily intercept. This sensitive information included the digital keys needed to access paid features that users had paid money to unlock.
The vulnerability works like leaving your house keys visible in the front window. When these apps communicated with their servers, they often included unencrypted credentials—essentially digital passwords—that traveled through the internet where anyone monitoring the connection could grab them. In some cases, the apps used permanent access tokens that never expired, meaning a stolen credential could be misused indefinitely.
This discovery reveals a fundamental gap between how apps are built and how they should be built. Developers created these applications without following basic security practices that have been standard in the industry for years. It's comparable to a bank that sends account numbers through postcards instead of sealed envelopes.
The most serious issue is that hackers wouldn't need sophisticated tools to exploit this weakness. Simply monitoring network traffic—the digital data flowing between your phone and company servers—would reveal the valuable credentials. A moderately skilled attacker could then use these stolen keys to access premium services without paying, or worse, gain unauthorized entry to user accounts.
Beyond individual users, this creates liability for the companies behind these applications. They're essentially leaving the door open for fraud, which could result in financial losses, damaged reputation, and potential legal consequences.
If you use AI chatbot applications on your iPhone, especially any premium versions you've paid for, this research suggests your payment access may be at risk. Every time you open one of these vulnerable apps, you're potentially exposing the credentials that grant access to features you've purchased.
More broadly, this highlights a troubling trend: as artificial intelligence becomes more mainstream, security hasn't kept pace with development speed. Companies rushing to release AI products are sometimes cutting corners on fundamental safety measures.
This also matters for trust. When you pay for software features, you expect reasonable protection of that investment. Studies like this one show that expectation isn't always being met.
Until these apps improve their security practices, treating them with caution is the safest approach for protecting your digital wallet and personal information.
Want to understand the technology behind this story? ITVedas has beginner-friendly guides on every IT topic.
Explore IT Chapters →