The Apple Wallet can be used to store credit cards, store cards, airline passes, concert tickets and more. This application not surprisingly also keeps track of the items purchased using Apple Pay. Apple Wallet transactions are still accessible from an iTunes backup of a file system dump of an iOS device. The data resident on the device is often more than typically stored by other banking applications. Examining the pass.json from /private/var/mobile/Library/Passes/Cards/GUID=.pkpass will provide transaction details for purchases made using Apple Wallet.
If you pull the Apple Wallet cloud data with Elcomsoft, you will have access to the same information as above, but there did not appear to be any information that was unique to one location or another.
Current iOS firmware versions make use of the Passes23.sqlite database stored in /private/var/mobile/Library/Passes. The Passes23.sqlite database contains much of the same information that was stored in the JSON files previously mentioned.
The relevant payment-related tables include:
Maps_merchant
Payment_application
Payment_transaction
Payment_message
Plantains
A second file that contains further relevant information related to purchases is: /private/var/mobile/Library/Caches/com.apple.passd/Cache.db. Payment transaction records are stored in the database table, cfurl_cache_blob_data and possibly, cfurl_cache_receiver_data. The data of importance is stored as BLOBs in JSON format and its possible that unique data may also still exist in the associated Write Ahead Log. Should this be the case, a very detailed explanation of the process used to carve this data from the WAL was documented by Ian Whiffin in his Doubleblak Forensics blog.
Reference:
[1] https://for585.com/wallet