EU DMA and Third-Party App Stores: What Changed for Purchase Safety and Refunds 欧盟 DMA 与第三方应用商店：购买安全与退款的变化

What the EU Digital Markets Act Actually Changed for App Store Users

The European Union's Digital Markets Act (DMA), which took effect in March 2024, is the most significant regulatory change to affect Apple's App Store since its launch in 2008. For users, the DMA means that for the first time, Apple is required to allow third-party app marketplaces on iOS in the EU. This means you can install apps from stores other than the App Store — stores like AltStore PAL, Setapp Mobile, and Epic Games Store — directly on your iPhone without jailbreaking or using enterprise certificates. The DMA also requires Apple to allow developers to use alternative payment systems within their apps, meaning an app can charge you through its own payment processor rather than through Apple's in-app purchase system. And it requires Apple to allow developers to link to external websites for purchases, a practice previously prohibited by App Store guidelines. These changes apply only to users in the European Union. If your Apple ID is registered to a country outside the EU, the App Store operates exactly as it did before. The practical implications are significant: more app sources, different refund paths, different payment protections, and different fraud risks. Understanding these changes is not optional for EU users — it is now part of the basic digital literacy required to use an iPhone safely.

欧盟数字市场法案对 App Store 用户实际改变了什么

欧盟《数字市场法案》（DMA）于 2024 年 3 月生效，是自 2008 年 App Store 推出以来影响 Apple 的最重大监管变化。对用户来说，DMA 意味着 Apple 首次被要求允许在欧盟的 iOS 上使用第三方应用市场。这意味着你可以从 App Store 以外的商店安装应用——像 AltStore PAL、Setapp Mobile 和 Epic Games Store 这样的商店——直接在你的 iPhone 上安装，无需越狱或使用企业证书。DMA 还要求 Apple 允许开发者在其应用内使用替代支付系统，这意味着应用可以通过自己的支付处理器而非通过 Apple 的应用内购买系统向你收费。它还要求 Apple 允许开发者链接到外部网站进行购买，这一做法此前被 App Store 指南禁止。这些变化仅适用于欧盟用户。如果你的 Apple ID 注册到欧盟以外的国家，App Store 的操作与之前完全相同。实际影响是重大的：更多应用来源、不同的退款路径、不同的支付保护、不同的欺诈风险。理解这些变化对欧盟用户来说不是可选的——它现在是在 iPhone 上安全使用所需的基本数字素养的一部分。

Third-Party App Stores and Purchase Safety: What Apple's Protection Covers and What It Does Not

The most important thing to understand about third-party app stores on iOS is that Apple's purchase protection does not extend to them. When you buy an app or make an in-app purchase through the official App Store, Apple acts as the payment intermediary. Apple's refund system — reportaproblem.apple.com — covers purchases made through the App Store. Apple's review process screens apps for scams, malware, and policy violations. And Apple's parental controls and Screen Time restrictions apply to App Store purchases. None of this applies to third-party app stores. Each third-party store has its own refund policy, its own payment system, and its own review process. The quality of these protections varies widely. Some stores, like Setapp, have established refund policies and customer support. Others are new and untested. The key principle: before using a third-party app store, find and read its refund policy. Know how to contact customer support. Understand what payment methods are accepted and how disputes are handled. And never assume that the protections you have come to expect from the App Store apply anywhere else. Apple's notarization process — which scans apps from third-party stores for malware — provides a baseline security check, but it does not review apps for scams, misleading pricing, or subscription traps. Those are the responsibility of the third-party store.

第三方应用商店与购买安全：Apple 保护涵盖什么，不涵盖什么

关于 iOS 上第三方应用商店最重要的事情是，Apple 的购买保护不延伸到它们。当你通过官方 App Store 购买应用或进行应用内购买时，Apple 充当中介。Apple 的退款系统——reportaproblem.apple.com——涵盖通过 App Store 进行的购买。Apple 的审核流程筛查应用中的诈骗、恶意软件和政策违规。Apple 的家长控制和屏幕使用时间限制适用于 App Store 购买。这些都不适用于第三方应用商店。每个第三方商店有自己的退款政策、自己的支付系统、自己的审核流程。这些保护的质量差异很大。一些商店，如 Setapp，有既定的退款政策和客户支持。其他商店是新的、未经测试的。关键原则：在使用第三方应用商店之前，找到并阅读其退款政策。知道如何联系客户支持。了解接受哪些支付方式以及如何处理争议。永远不要假设你在 App Store 上习惯的保护适用于其他任何地方。Apple 的公证流程——扫描来自第三方商店的应用中的恶意软件——提供基线安全检查，但它不审核应用中的诈骗、误导性定价或订阅陷阱。这些是第三方商店的责任。

Alternative Payment Systems: Lower Prices, Fewer Protections

Under the DMA, developers can now use alternative payment systems within their apps. This means that when you tap 'Buy' in an app, you may be taken to the developer's own website to complete the payment, rather than using Apple's in-app purchase system. The benefit for users is potentially lower prices — developers can avoid Apple's 15-30 percent commission and pass the savings on. The risk is that you lose Apple's payment protections. Apple's in-app purchase system provides several layers of protection: the payment is processed through Apple's secure payment infrastructure, the purchase appears in your Apple ID purchase history, you can request a refund through reportaproblem.apple.com, and the purchase is covered by Apple's dispute resolution process. When you pay through a developer's own payment system, none of these protections apply. The payment is between you and the developer. If the developer refuses a refund, you have no recourse through Apple. If the developer's payment system is compromised, your credit card information is exposed. If the developer goes out of business, your subscription may disappear without a refund. The practical recommendation: for small purchases from trusted developers, alternative payment systems can be a good deal. For large purchases, subscriptions, or purchases from unfamiliar developers, stick with Apple's in-app purchase system. The extra cost is the price of the protection.

替代支付系统：更低价格，更少保护

根据 DMA，开发者现在可以在其应用内使用替代支付系统。这意味着当你点击应用中的'购买'时，你可能被带到开发者自己的网站完成支付，而不是使用 Apple 的应用内购买系统。对用户的好处是可能更低的价格——开发者可以避免 Apple 的 15-30% 佣金，并将节省转给用户。风险是你失去了 Apple 的支付保护。Apple 的应用内购买系统提供多层保护：支付通过 Apple 的安全支付基础设施处理，购买出现在你的 Apple ID 购买记录中，你可以通过 reportaproblem.apple.com 请求退款，购买受 Apple 的争议解决流程覆盖。当你通过开发者自己的支付系统支付时，这些保护都不适用。支付是你和开发者之间的。如果开发者拒绝退款，你无法通过 Apple 追索。如果开发者的支付系统被攻破，你的信用卡信息暴露。如果开发者倒闭，你的订阅可能消失而没有退款。实际建议：对于来自受信任开发者的小额购买，替代支付系统可能是好交易。对于大额购买、订阅或来自不熟悉开发者的购买，坚持使用 Apple 的应用内购买系统。额外的成本是保护的价格。

Refund Fragmentation: One Purchase, Multiple Refund Paths

Before the DMA, refunds for iOS purchases were simple: everything went through reportaproblem.apple.com. Now, EU users face a fragmented refund landscape. Purchases made through the official App Store are still refunded through Apple. Purchases made through third-party app stores are refunded through those stores' own processes. Purchases made through alternative payment systems within apps are refunded through the developer's payment processor. And purchases made through external links from apps are refunded through whatever system the developer linked to. This fragmentation creates a practical problem: when a charge appears on your credit card statement, you may not know which refund path to use. The charge may say 'Apple' even if it was processed through a third-party system, because Apple still bills for some DMA-related services. The solution is to keep better records than before. Note which store you used for each purchase. Note which payment system you used. Save order confirmation emails. And before requesting a refund, identify the correct refund path by checking the order confirmation, not the credit card statement. The credit card statement is unreliable for identifying the payment processor under the DMA.

退款碎片化：一次购买，多重退款路径

在 DMA 之前，iOS 购买的退款很简单：一切都通过 reportaproblem.apple.com。现在，欧盟用户面临碎片化的退款格局。通过官方 App Store 进行的购买仍通过 Apple 退款。通过第三方应用商店进行的购买通过这些商店自己的流程退款。通过应用内替代支付系统进行的购买通过开发者的支付处理器退款。通过应用内外部链接进行的购买通过开发者链接的任何系统退款。这种碎片化造成了一个实际问题：当一笔扣费出现在你的信用卡账单上时，你可能不知道使用哪个退款路径。扣费可能显示'Apple'，即使它通过第三方系统处理，因为 Apple 仍为某些 DMA 相关服务计费。解决方案是比以前保持更好的记录。记录你用于每次购买的商店。记录你使用的支付系统。保存订单确认邮件。在请求退款之前，通过检查订单确认来识别正确的退款路径，而非信用卡账单。信用卡账单在 DMA 下识别支付处理器是不可靠的。

Scam and Fraud Risks: The New Attack Surface Created by the DMA

The DMA has created new attack surfaces for scammers. Before the DMA, the only way to get an app on an iPhone was through the App Store, which Apple reviewed. Now, third-party app stores can distribute apps that Apple's review process has not examined for scams. This does not mean all third-party stores are dangerous — it means users need to apply their own judgment in a way that was not necessary before. The specific risks include: fake payment screens that mimic Apple's in-app purchase interface but send your credit card information to scammers; apps that redirect to external websites that look legitimate but are designed to steal credentials; subscription traps that use alternative payment systems to avoid Apple's cancellation requirements; and fake app stores that mimic legitimate third-party stores but are actually malware distribution points. The protection against these risks is not technical — it is behavioral. Before installing any third-party app store, verify it is listed on Apple's official page of authorized marketplaces. Before completing any payment through an alternative system, verify the URL and look for the lock icon indicating HTTPS. Before entering your Apple ID password on any screen, verify that the screen is from Apple and not a phishing overlay. And if a deal seems too good to be true — a premium app for free, a subscription at 90 percent off — it probably is.

诈骗和欺诈风险：DMA 创建的新攻击面

The Practical Guide: How to Stay Safe on iOS in the EU Under the DMA

Here is a practical, step-by-step guide for EU iPhone users navigating the DMA changes. First, decide whether you need third-party app stores at all. The official App Store still has the largest selection of apps, the strongest security review, and the simplest refund process. For most users, the App Store is sufficient. Second, if you do use a third-party store, pick one. Start with a store that has an established reputation, such as Setapp Mobile or AltStore PAL. Do not install multiple third-party stores just because they are available — each one is a new vector for potential problems. Third, for payments, default to Apple's in-app purchase system unless you have a specific reason to use an alternative. The small price difference is worth the protection. Fourth, keep a purchase log. For every purchase made outside the App Store, record: the date, the store or payment system used, the amount, and the order confirmation number. This log is your only recourse if a dispute arises. Fifth, review your credit card statements monthly. Under the DMA, charges from alternative payment systems may appear with unfamiliar merchant names. If you see a charge you do not recognize, investigate it immediately — do not wait. Sixth, enable two-factor authentication on your Apple ID and on any payment accounts you use with third-party stores. The DMA has increased the number of systems that have access to your payment information, and each one is a potential breach point.

实用指南：在 DMA 下如何在欧盟 iOS 上保持安全

以下是欧盟 iPhone 用户应对 DMA 变化的实用分步指南。第一，决定你是否真的需要第三方应用商店。官方 App Store 仍然拥有最大的应用选择、最强的安全审核和最简单的退款流程。对大多数用户来说，App Store 就足够了。第二，如果你确实使用第三方商店，选择一个。从有良好声誉的商店开始，如 Setapp Mobile 或 AltStore PAL。不要仅仅因为它们可用就安装多个第三方商店——每一个都是潜在问题的新向量。第三，对于支付，默认使用 Apple 的应用内购买系统，除非你有特定原因使用替代方案。微小的价格差异值得保护。第四，保持购买日志。对于在 App Store 之外进行的每笔购买，记录：日期、使用的商店或支付系统、金额和订单确认号。这个日志是争议出现时你的唯一追索途径。第五，每月审查你的信用卡账单。在 DMA 下，来自替代支付系统的扣费可能以不熟悉的商户名称出现。如果你看到不认识的扣费，立即调查——不要等待。第六，在你的 Apple ID 和任何与第三方商店使用的支付账户上启用双因素认证。DMA 增加了可以访问你支付信息的系统数量，每一个都是潜在的泄露点。

The Long-Term Outlook: What the DMA Means for App Store Users Worldwide

The DMA is an EU regulation, but its effects are global. The changes Apple has made to comply with the DMA have created a technical infrastructure that could be extended to other regions if similar regulations are passed. Japan, South Korea, the United Kingdom, and Australia are all considering or have passed legislation that would require similar changes to app store policies. The United States has ongoing antitrust cases against Apple that could result in similar requirements. What this means for users is that the fragmented refund landscape currently limited to the EU is likely to expand. The skills required to navigate it — understanding multiple refund paths, verifying payment systems, keeping purchase records — are not EU-specific skills. They are the future of digital purchasing on all platforms. The best preparation is to start practicing these skills now, regardless of where you live. The era of a single, unified refund path for all app purchases is ending. The era of user responsibility for understanding and managing multiple payment and refund systems is beginning.

长期展望：DMA 对全球 App Store 用户意味着什么

DMA 是欧盟法规，但其影响是全球性的。Apple 为遵守 DMA 所做的更改创建了一个技术基础设施，如果类似法规通过，可以扩展到其他地区。日本、韩国、英国和澳大利亚都在考虑或已通过立法，要求对应用商店政策进行类似更改。美国有正在进行的针对 Apple 的反垄断案件，可能导致类似要求。这对用户意味着目前仅限于欧盟的碎片化退款格局可能会扩大。驾驭它所需的技能——理解多重退款路径、验证支付系统、保持购买记录——不是欧盟特有的技能。它们是所有平台上数字购买的未来。最好的准备是现在就开始练习这些技能，无论你住在哪里。所有应用购买单一、统一退款路径的时代正在结束。用户理解和管理多个支付和退款系统的责任时代正在开始。

Quick Reference: EU DMA Refund Paths at a Glance

Use this as a quick reference for where to request a refund under the DMA. App Store purchase (standard in-app purchase): reportaproblem.apple.com. Third-party app store purchase: the third-party store's own support page. Alternative payment system within an app: the developer's payment processor support. External link purchase: the website you were directed to. Subscription through App Store: Apple's subscription management in Settings. Subscription through alternative system: the developer's account management page. If you cannot identify the refund path: first check the order confirmation email. The merchant name in the email is the entity you need to contact. If there is no order confirmation email, check your credit card statement for the merchant name and search for their refund policy online. If you still cannot find the refund path, contact your bank and explain the situation — some banks will initiate a dispute for unrecognized charges from unfamiliar merchants. The most important rule is to act quickly. The refund window for most DMA payment paths is shorter than the App Store's window, and waiting too long is the most common reason for denied refunds.

快速参考：欧盟 DMA 退款路径一览

使用此作为 DMA 下何处请求退款的快速参考。App Store 购买（标准应用内购买）：reportaproblem.apple.com。第三方应用商店购买：第三方商店自己的支持页面。应用内替代支付系统：开发者的支付处理器支持。外部链接购买：你被导向的网站。通过 App Store 的订阅：设置中的 Apple 订阅管理。通过替代系统的订阅：开发者的账户管理页面。如果你无法识别退款路径：首先检查订单确认邮件。邮件中的商户名称是你需要联系的主体。如果没有订单确认邮件，检查你的信用卡账单中的商户名称，并在网上搜索其退款政策。如果你仍然找不到退款路径，联系你的银行并解释情况——一些银行会为来自不熟悉商户的不明扣费发起争议。最重要的规则是快速行动。大多数 DMA 支付路径的退款窗口比 App Store 的窗口短，等待太久是被拒退款的最常见原因。