Hello. In my game, IAP cases have become more frequent without paying through Google Play. I was already tired of fighting cheaters and somehow read that you can additionally check the purchase through your server. I have hosting and my own domain, can you tell me how to make additional protection? Thanks
Are you using client receipt validation? We do not offer a server validation solution at this time, only client. Some companies like PlayFab and ChilliConnect offer such services. It’s on our roadmap. https://docs.unity3d.com/Manual/UnityIAPValidatingReceipts.html . One note, receipt validation is not supported in Codeless IAP, you would need to use Scripted IAP like in this Sample IAP Project https://discussions.unity.com/t/700293/4
I am the developer of Simple IAP System and built a solution for server-side receipt validation for the past 2 years. It went finally live at the beginning of this month and comes with a lot of common features around receipt validation too. There is free tier as well if you would like to check it out!
The service is a combination of:
- validating the receipts on a server at the time of purchase
- validating updated receipts using webhooks from the App Stores
- making in-app purchase transactions globally unique for your app
- storing user inventory on the server, not on the client
- (optionally) storing the purchases locally with encryption
Enough talking, just browse the site and docs for more information:
Nice! We’ve heard good things about Simple IAP System
Thanks everyone, I’ll take a look at this.