---
title: "Pixalate Week in Review: November 21 - 25, 2022"
description: Pixalate reviews this week's news in the programmatic ad fraud space. Find the most critical ad tech and privacy news from November 21 - 25, 2022.
image: https://www.pixalate.com/hubfs/Piotr%20-%20Blog%20Graphics%20(5).jpg
---

[![pixalate-full-logo](https://www.pixalate.com/hs-fs/hubfs/Pixalate_Logos/pixalate-full-logo.jpg?width=150&height=60&name=pixalate-full-logo.jpg "pixalate-full-logo")](https://www.pixalate.com)

Search

**Menu**

** **

![](https://www.pixalate.com/hubfs/Blog_Media/Blog%20photos/pixalate-blog-bg.png)

[Weekly Recaps](https://www.pixalate.com/blog/topic/weekly-recaps) |

 4 min read

# Pixalate Week in Review: November 21 - 25, 2022

 Written by [Liz Margolis](https://www.pixalate.com/blog/author/liz-margolis)

 Nov 28, 2022 12:30:00 PM

This week's review of ad fraud and privacy in the digital advertising space:

## Unmasking ‘iP64’ - An Ad Fraud Exploit Targeting Apple’s iCloud Private Relay Infrastructure and Costing Advertisers an estimated $65+ Million

![iCloud Private Relay Cover Graphic_V5](https://www.pixalate.com/hs-fs/hubfs/iCloud%20Private%20Relay%20Cover%20Graphic_V5.png?width=646&height=363&name=iCloud%20Private%20Relay%20Cover%20Graphic_V5.png)

Pixalate released its "Unmasking iP64" investigation, looking at invalid traffic (“IVT,” or ad fraud) in connection with iCloud Private Relay IP Addresses. [Pixalate's findings](https://www.pixalate.com/blog/ip64-ad-fraud-exploit-apple-icloud-private-relay) show how ad fraudsters appear to be exploiting the unquestioned trust of Apple’s iCloud Private Relay IP Addresses - aided by the opacity of the ad tech supply chain. Pixalate named the scheme *iP64* because of the way in which apparent fraudsters seem to be inserting iCloud Private Relay IPv6 and IPv4 addresses into ad requests to masquerade the true source of the traffic. 

## Pixalate Releases 2022 Social Media Invalid Traffic (IVT) Report, Finds 6.7% IVT on Twitter’s App in October 2022

**![Pixalates October 2022 Social Media IVT Benchmarks Report](https://www.pixalate.com/hs-fs/hubfs/Pixalates%20October%202022%20Social%20Media%20IVT%20Benchmarks%20Report.png?width=646&height=363&name=Pixalates%20October%202022%20Social%20Media%20IVT%20Benchmarks%20Report.png)**

Pixalate published the [Q3 2022 Invalid Traffic (IVT) Report: Social Media Apps](https://www.pixalate.com/blog/q3-2022-itv-benchmarks-social-media-apps) which included a comprehensive examination of the instances of all forms of invalid traffic on popular social media apps on the web and mobile devices.. The report covered a wide variety of data points with the blog breaking it down further and highlighting some interesting topics.

For more information on IVT trends, download a free copy of the report here:

[![Download the Report](https://no-cache.hubspot.com/cta/default/2364596/2d2e3120-deca-4e57-bb01-f701e36dd82d.png)](https://cta-redirect.hubspot.com/cta/redirect/2364596/2d2e3120-deca-4e57-bb01-f701e36dd82d)

## Hulu reclaims top spot in Pixalate’s CTV Publisher Trust Index for both Roku & Fire TV North America, Red Bull TV makes First Appearance Ranking in Top 3 on Roku

**![Oct 22_PTI Data for AFAC Blogs](https://www.pixalate.com/hs-fs/hubfs/Oct%2022_PTI%20Data%20for%20AFAC%20Blogs.png?width=646&height=363&name=Oct%2022_PTI%20Data%20for%20AFAC%20Blogs.png)**

Pixalate’s monthly Publisher Trust Index (PTI) report provides a perspective regarding the quality of CTV apps that support programmatic advertising with rankings broken down by region, country, category, and app store. The assessment is based on various factors including invalid traffic (IVT), popularity, ad density, and engagement scores. 

[![See the Rankings](https://no-cache.hubspot.com/cta/default/2364596/dcee8ea2-a17b-4220-b929-3f3d9ef077b8.png)](https://cta-redirect.hubspot.com/cta/redirect/2364596/dcee8ea2-a17b-4220-b929-3f3d9ef077b8)

## Mobile App Manual Review under COPPA Rule: 'Talking James Squirrel-Virtu' and 'Toca Life World'

**![Children’s Online Privacy Compliance Review Series_Week 3_V2](https://www.pixalate.com/hs-fs/hubfs/Children%E2%80%99s%20Online%20Privacy%20Compliance%20Review%20Series_Week%203_V2.png?width=646&height=363&name=Children%E2%80%99s%20Online%20Privacy%20Compliance%20Review%20Series_Week%203_V2.png)**

Pixalate continued its [Mobile App Manual Reviews According to COPPA](https://www.pixalate.com/blog/coppa-manual-review-series-faq) series, containing the detailed factors the [Trust & Safety Advisory Board](https://www.pixalate.com/trust-and-safety-advisory-board) educators used to assess an app’s child-directedness. [This post](https://www.pixalate.com/blog/app-review-series-talking-james-squirrel-virtu-toca-life-world) takes a look at two popular mobile apps from the Apple App and Google Play Store. Our reviewer discusses how the subjective factors set forth in the COPPA Rule apply to each app and factor into the reviewer's determination as to whether the app is child-directed or general audience (i.e., it is not targeting children).

 

## Top 5 countries with the highest invalid traffic (IVT) rates for mobile in-app programmatic advertising (Q2 2022)

**![IVT in Mobile Apps by Country (Q2 2022)_1920x1080](https://www.pixalate.com/hs-fs/hubfs/IVT%20in%20Mobile%20Apps%20by%20Country%20(Q2%202022)_1920x1080.png?width=646&height=364&name=IVT%20in%20Mobile%20Apps%20by%20Country%20(Q2%202022)_1920x1080.png)**

Pixalate published the [Q2 2022 Invalid Traffic (IVT) Benchmarks](https://www.pixalate.com/q2-2022-ivt-benchmarks-report) report earlier this month, describing IVT distribution in programmatic advertising impressions. It covered a wide variety of data points, and Pixalate is breaking it down further in this series by highlighting interesting findings.

## **Gizmodo: Pixalate Finds iCloud Privacy Relay Could Be Facilitating $65M Scam**

**![phone-scam-alert-phising-malware-small](https://www.pixalate.com/hs-fs/hubfs/Email_Imagery/Weekly%20blog%20email/phone-scam-alert-phising-malware-small.png?width=646&height=411&name=phone-scam-alert-phising-malware-small.png)**

[Gizmodo](https://gizmodo.com/apple-icloud-private-relay-ad-fraud-scam-research-1849803510/amp) published a comprehensive article about the findings of Pixalate's [iP64 Investigation](https://www.pixalate.com/blog/ip64-ad-fraud-exploit-apple-icloud-private-relay), showing that Apple's Private Relay is being exploited for a massive ad fraud scam despite promises of "built-in fraud protection".

Gizmodo wrote:

*"Pixalate, the ad tech firm that authored the [study](https://www.pixalate.com/blog/ip64-ad-fraud-exploit-apple-icloud-private-relay), released Tuesday, says the problem will cost US advertisers an estimated $65 million in 2022 alone. The study finds that 90% of web traffic that looks like it’s coming from Private Relay is actually fraudulent."*

## Apple Insider: Apple iCloud Private Relay Being Used Fraudulently 

![hacker-scammer-fraudster](https://www.pixalate.com/hs-fs/hubfs/Blog_Media/Blog%20photos/hacker-scammer-fraudster.png?width=646&height=323&name=hacker-scammer-fraudster.png)

[Apple Insider](https://appleinsider.com/articles/22/11/22/apples-icloud-private-relay-being-abused-in-65m-ad-fraud) published an article detailing Pixalate's investigation Unmasking ‘iP64’ Ad Fraud Investigation.

Apple Insider said:

"The Ad Fraud and Compliance research team of Pixalate [claims](https://www.pixalate.com/blog/ip64-ad-fraud-exploit-apple-icloud-private-relay) there is a potential exploit in the system that relates to IP addresses used by iCloud Private Relay. Dubbed "iP64," it is believed that ad fraudsters are taking advantage of the trust in iCloud Private Relay by the ad industry, as well as other factors, to get away with ad fraud."

## **Apple Insider: Cybercriminals Abusing iCloud Private Relay**

**![scam-app-malware-phone-fraud-phone-mobile](https://www.pixalate.com/hs-fs/hubfs/Blog_Media/Blog%20photos/scam-app-malware-phone-fraud-phone-mobile.png?width=646&height=323&name=scam-app-malware-phone-fraud-phone-mobile.png)**

Finally, [Tom's Guide](https://www.tomsguide.com/uk) issued a news article covering Pixalate's iP64 Investigation.

Tom's Guide stated:

*"In its report, Pixalate says that cybercriminals are committing ad fraud by inserting iPv6 and IPv4 IP addresses from Private Relay into digital advertising bid requests. While Private Relay is designed to be used exclusively with Apple’s Safari browser, the firm found IP addresses from the service attached to Mozilla Firefox as well as to non-Apple devices that can’t even run Safari."*

### Search Blog

Search

### Follow Pixalate

<https://twitter.com/pixalateinc> <https://www.linkedin.com/company/pixalate> <https://www.facebook.com/pixalate>

### Subscribe to our blog

*By entering your email address and clicking Subscribe, you are agreeing to our [Terms of Use ](https://www.pixalate.com/terms)and [Privacy Policy.](https://www.pixalate.com/privacypolicy)

Previous Story

[← Pixalate Reports $11M Ad Spend on Delisted Mobile Apps Across Apple App & Google Play Stores in Q3 2022](https://www.pixalate.com/blog/q3-2022-programmatic-advertising-delisted-apps-report-google-apple)

[** ](https://www.pixalate.com/blog)

Next Story

[Pixalate Releases Q3 2022 Ad Compliance Report For Apple And Google App Stores, Finds $2MM Ad Spend On Apps With Missing Privacy Policies →](https://www.pixalate.com/blog/q3-2022-programmatic-ads-missing-privacy-policy-report-mobile-apps)

## You May Also Like

These Stories on Weekly Recaps

[![](https://www.pixalate.com/hubfs/pixalate-week-review-june-13.png) ](https://www.pixalate.com/blog/june-20-2025)

[Weekly Recaps](https://www.pixalate.com/blog/topic/weekly-recaps)

### [Pixalate Week in Review: June 16 - June 20, 2025](https://www.pixalate.com/blog/june-20-2025)

 Jun 20, 2025 11:09:13 AM |

 3 min read

[![](https://www.pixalate.com/hubfs/pixalate-week-review-june-13.png) ](https://www.pixalate.com/blog/june-13-2025)

[Weekly Recaps](https://www.pixalate.com/blog/topic/weekly-recaps)

### [Pixalate Week in Review: June 9 - June 13, 2025](https://www.pixalate.com/blog/june-13-2025)

 Jun 13, 2025 11:39:50 AM |

 3 min read

[![](https://www.pixalate.com/hubfs/June-6-Pixalate-Recap.png) ](https://www.pixalate.com/blog/june-6-2025)

[Weekly Recaps](https://www.pixalate.com/blog/topic/weekly-recaps)

### [Pixalate Week in Review: June 2 - June 6, 2025](https://www.pixalate.com/blog/june-6-2025)

 Jun 6, 2025 1:00:13 PM |

 2 min read

**

### Subscribe to our blog

*By entering your email address and clicking Subscribe, you are agreeing to our [Terms of Use ](https://www.pixalate.com/terms)and [Privacy Policy.](https://www.pixalate.com/privacypolicy)

![pixalate-logo-red-small](https://www.pixalate.com/hs-fs/hubfs/2018NewTemplate/pixalate-logo-red-small.png?width=208&name=pixalate-logo-red-small.png "pixalate-logo-red-small")

**

 By entering your email address and clicking Subscribe, you are agreeing to our [Terms of Use](https://www.pixalate.com/terms) and [Privacy Policy](https://www.pixalate.com/privacypolicy)

Products

[Analytics](https://www.pixalate.com/products/analytics) [Blocking](https://www.pixalate.com/products/blocking) [Media Rating Terminal](https://www.pixalate.com/products/mrt) [Publisher Trust Indexes](https://www.pixalate.com/rankings/?group=app&reportId=publisherTrustIndex) [Seller Trust Indexes](https://www.pixalate.com/rankings/?group=app&reportId=publisherTrustIndex) [IoT Device Rankings](https://www.pixalate.com/rankings/?group=app&reportId=iotDeviceReach)

Resources

[Blog](https://blog.pixalate.com/) [Press](https://www.pixalate.com/press) [Careers](https://www.pixalate.com/jobs) [Team](https://info.pixalate.com/pixalate-leadership-team)

Contact

Email

[** sales@pixalate.com ](mailto:sales@pixalate.com)

[** privacy@pixalate.com ](mailto:privacy@pixalate.com)

US:

[** +1 888 749 2528 ](tel:+1%20888%20749%202528)

EU:

[** +44 (0)800 011 2050 ](tel:+44%20(0)800%20011%202050)

Slack:

[Join ATSAPI Slack Channel ](https://atsapi-pixalate.slack.com/join/shared_invite/zt-10dtow5cj-OEtlNr5yzJkrZMQUqcEEow#/shared-invite/email)

Offices

Global Offices

US

1775 Greensboro Station Place, Suite 425, McLean, VA 22102

UK

20 North Audley Street   
London, W1K 6WE, United Kingdom

EU

10 Earlsfort Terrace   
Dublin 2, D02 T380, Ireland

Singapore

10 Anson Road, #22-02 International Plaza, Singapore 079903

[![facebook](https://www.pixalate.com/hubfs/footer/icons/facebook.png) ](https://www.facebook.com/pixalate) [![x](https://www.pixalate.com/hubfs/footer/icons/twitter-x.png) ](https://twitter.com/pixalateinc) [![linkedin](https://www.pixalate.com/hubfs/footer/icons/linkedin.png) ](https://www.linkedin.com/company/pixalate) ![wechat](https://www.pixalate.com/hubfs/footer/icons/wechat.png) [![slack](https://www.pixalate.com/hubfs/footer/icons/slack.png) ](https://atsapi-pixalate.slack.com/join/shared_invite/zt-10dtow5cj-OEtlNr5yzJkrZMQUqcEEow#/shared-invite/email)

[Terms of Use](https://www.pixalate.com/terms) [Privacy Policy](https://www.pixalate.com/privacypolicy) [GDPR Compliance](https://www.pixalate.com/gdpr) Disclaimer

Copyright © 2025 Pixalate

[Back to top **](https://www.pixalate.com/blog/november-25-2022-weekly-update#)

# Disclaimer

 Disclaimer: The content of this page reflects Pixalate’s opinions with respect to the factors that Pixalate believes can be useful to the digital media industry. Any proprietary data shared is grounded in Pixalate’s proprietary technology and analytics, which Pixalate is continuously evaluating and updating. Any references to outside sources should not be construed as endorsements. Pixalate’s opinions are just that - opinion, not facts or guarantees.

 Per the MRC, “'Fraud' is not intended to represent fraud as defined in various laws, statutes and ordinances or as conventionally used in U.S. Court or other legal proceedings, but rather a custom definition strictly for advertising measurement purposes. Also per the MRC, “‘Invalid Traffic’ is defined generally as traffic that does not meet certain ad serving quality or completeness criteria, or otherwise does not represent legitimate ad traffic that should be included in measurement counts. Among the reasons why ad traffic may be deemed invalid is it is a result of non-human traffic (spiders, bots, etc.), or activity designed to produce fraudulent traffic.”

**

**

*By clicking Download and entering your email address, you are agreeing to our [Terms of Use](https://www.pixalate.com/terms) and have read and acknowledge our [Privacy Policy](https://www.pixalate.com/hubfs/2024-08-20_Pixalate_Privacy_Policy.pdf).

*Copyright © 2025 Pixalate** *

* *

* *

* *

* *

* *

* *

* *

* *

* *

* *

* *

* *

* *

*

×

## Subscribe to the Pixalate Blog

The first step in ad fraud prevention.

Loading...

 By entering your email address and clicking Submit, you are agreeing to our [Terms of Use](https://www.pixalate.com/terms) and [Privacy Policy](https://www.pixalate.com/privacypolicy).

![pixalate-logo-white](https://www.pixalate.com/hubfs/Blog_V2_08_26_2016/logo/Pixalate_Logo_WHITE.png)

##### Contact Us12

Loading...

![pixalate-logo-white](https://www.pixalate.com/hubfs/Blog_V2_08_26_2016/logo/Pixalate_Logo_WHITE.png)

##### Download GSTI

Loading...

Schedule your demo today

Please complete all fields

Loading...

By entering your email address and clicking Submit, you are agreeing to our [Terms of Use](https://www.pixalate.com/terms) and [Privacy Policy](https://www.pixalate.com/privacypolicy).

*

* *

*

*