A method of wireless communication performed by a receiving wireless network access device, comprising: receiving a data packet associated with an indication of a first message authentication code and a second message authentication code; determining , based at least in part on a first security key used to communicate with a transmitting wireless device, that the first message authentication code was generated at least in part by the transmitting wireless device, the transmitting wireless device comprising a UE; determining , based at least in part on a second security key used to communicate with a relay user equipment "UE" configured to relay data from the transmitting wireless device to the receiving wireless network access device via a data routing path, that the second message authentication code was generated at least in part by the relay UE; determining that the indication of the first message authentication code was generated at least in part by a second relay UE; and processing the data packet as received from the transmitting wireless device based at least in part on the determinations that the first message authentication code was generated at least in part by the transmitting wireless device and the second message authentication code was generated at least in part by the relay UE, wherein the determination that the indication of the first message authentication code was generated at least in part by the second relay UE is based at least in part on: a combination of a first counter value that was written in a header of the data packet by the UE, and a flow identifier that was written in the header of the data packet by the UE; a combination of the first counter value and a locally-stored UE identifier associated with a data radio bearer "DRB" over which the data packet is received by or transmitted from the second relay UE; or a second counter value written in the header of the data packet by the second relay UE. receiving a data packet associated with an indication of a first message authentication code and a second message authentication code; determining , based at least in part on a first security key used to communicate with a transmitting wireless device, that the first message authentication code was generated at least in part by the transmitting wireless device, the transmitting wireless device comprising a UE; determining , based at least in part on a second security key used to communicate with a relay user equipment "UE" configured to relay data from the transmitting wireless device to the receiving wireless network access device via a data routing path, that the second message authentication code was generated at least in part by the relay UE; determining that the indication of the first message authentication code was generated at least in part by a second relay UE; and processing the data packet as received from the transmitting wireless device based at least in part on the determinations that the first message authentication code was generated at least in part by the transmitting wireless device and the second message authentication code was generated at least in part by the relay UE, wherein the determination that the indication of the first message authentication code was generated at least in part by the second relay UE is based at least in part on: a combination of a first counter value that was written in a header of the data packet by the UE, and a flow identifier that was written in the header of the data packet by the UE; a combination of the first counter value and a locally-stored UE identifier associated with a data radio bearer "DRB" over which the data packet is received by or transmitted from the second relay UE; or a second counter value written in the header of the data packet by the second relay UE. <EOS>