iPhone Wallet accessed overnight

Found my Bluetooth & Cellular Hotspot button turned on when I turned on my phone this AM, and checked Analytics to see if there was a cause. I never use Bluetooth or my phone's hotspot & disconnect everything before going to bed in Airplane mode. Have seen the attached repeatedly, w/the wallet app being accessed, Splunk messages, and something called "WLT-2" which I can find is an electronic transducer sensor online. This all occurred before I woke up & has happened before. Any ideas? I do not store anything in my wallet, but in Nov '23 had debit card fraud & bank said it was stored digitally. TIA!


[Edited by Moderator]

iPhone SE, iOS 18

Posted on Jul 12, 2025 9:52 AM

Reply
Question marked as Top-ranking reply

Posted on Jul 12, 2025 10:26 AM

Even if you had payment methods stored (credit and/or debit cards) no account details are stored in the Apple Wallet app. Financial details for payment methods is only stored in the Secure Element (SE) and Secure Enclave. Nothing is stored unencrypted and the key to decrypt resides with the bank and possibly Payment Network Operator (PNO).


The SE can’t be attacked through the iOS. SE uses Java as an operating system and is not connected to iOS.


Basically, I doubt anything is going on. If you want to investigate further please contact Apple Support. If you’re in the US please call  1-800-MY-APPLE or outside the US, consult the support articles below.


Contact Apple for support and service - Apple Support


Genius Bar Reservation and Apple Support Options - Apple


Official Apple Support

5 replies
Question marked as Top-ranking reply

Jul 12, 2025 10:26 AM in response to mmmdr

Even if you had payment methods stored (credit and/or debit cards) no account details are stored in the Apple Wallet app. Financial details for payment methods is only stored in the Secure Element (SE) and Secure Enclave. Nothing is stored unencrypted and the key to decrypt resides with the bank and possibly Payment Network Operator (PNO).


The SE can’t be attacked through the iOS. SE uses Java as an operating system and is not connected to iOS.


Basically, I doubt anything is going on. If you want to investigate further please contact Apple Support. If you’re in the US please call  1-800-MY-APPLE or outside the US, consult the support articles below.


Contact Apple for support and service - Apple Support


Genius Bar Reservation and Apple Support Options - Apple


Official Apple Support

iPhone Wallet accessed overnight

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.