A computer-implemented method comprising: receiving, from a first application executing on a client device, a request to generate a click verification token that is used to verify whether a first interaction with a particular content item provided for display in the first application is an interaction by a user of the client device, wherein the request includes initial attestation data that is identified by the first application as being obtained from the operating system, the initial attestation data including: data for a first set of parameters that is identified by the first application as being descriptive of the first interaction; and a first message authentication code (MAC) set that is identified by the first application as being generated using the data for the first set of parameters; obtaining, from the operating system, an indication specifying whether the first MAC set is identical to a second MAC set, wherein the second MAC set is generated by the operating system using the data for the first set of parameters that is included in the request; in response to obtaining the indication specifying that the first MAC set is identical to the second MAC set, generating a click verification token that is used to verify whether the first interaction is an interaction by the user of the client device, wherein a payload of the click verification token includes the data for a first set of parameters that is descriptive of the first interaction and data identifying the particular content item data; and providing, to the first application, the generated click verification token. receiving, from a first application executing on a client device, a request to generate a click verification token that is used to verify whether a first interaction with a particular content item provided for display in the first application is an interaction by a user of the client device, wherein the request includes initial attestation data that is identified by the first application as being obtained from the operating system, the initial attestation data including: data for a first set of parameters that is identified by the first application as being descriptive of the first interaction; and a first message authentication code (MAC) set that is identified by the first application as being generated using the data for the first set of parameters; data for a first set of parameters that is identified by the first application as being descriptive of the first interaction; and a first message authentication code (MAC) set that is identified by the first application as being generated using the data for the first set of parameters; obtaining, from the operating system, an indication specifying whether the first MAC set is identical to a second MAC set, wherein the second MAC set is generated by the operating system using the data for the first set of parameters that is included in the request; in response to obtaining the indication specifying that the first MAC set is identical to the second MAC set, generating a click verification token that is used to verify whether the first interaction is an interaction by the user of the client device, wherein a payload of the click verification token includes the data for a first set of parameters that is descriptive of the first interaction and data identifying the particular content item data; and providing, to the first application, the generated click verification token. <EOS>