Mobile devices and servers that securely manage transactional history for targeted content are described. A content originator generates a secure content package for the targeted content and delivers the package to a trusted service manager (TSM). The TSM delivers the package to a first mobile device. The first mobile device presents the package for redemption and/or transfers the package to one or more additional mobile devices. Prior to presentment or transfer, the first mobile device updates a secure history container of the package to include a unique identifier of the first mobile device and a corresponding authentication token. When the package is presented for redemption, the TSM validates the package and authenticates the secure history container. The TSM delivers the authenticated secure history container to the content originator as a record of the redemption.