Purchases by credit hash not user id