PayPal-- so here, we see PayPal on Android
on the left-hand side.
When you start looking here, this is where you're like,
where should I go?
I would go to databases first.
After databases, I would look at cache.
And then you'll see a whole bunch of other files in here.
If it's not parsed, you're going to have to look for it.
If you uncover the screenshot--
so here, we see a screenshot.
It looks like a purchase for Ruggable
and how much was taken.
What happens if you look at their email?
So here, you can see it saying, OK, you got a Ruggable.
This is what was sent to you.
We see the transaction information all stored there.
There could be evidence in many places with these payment apps.
So this is an example of PayPal.
Something I want to caution you on-- if it's PayPal for iOS,
the plist file, if more than one person ever logs into PayPal,
you need to manually go through that plist
and look for the other users.