title: Fraud Google Play Order ID received
body: <p>I have implemented In App Billing for my Android app.</p>
  
  <p>After a feature is purchased in my app, I have been collecting the Purchase bundle of that purchase order to my local server.</p>
  
  <p>I don’t know what’s wrong or happened, but I observed a few purchase orders on my local server, which are not reflected on the merchant page.</p>
  
  <p>When I check the purchase orders at my server, I found something strange like, the Order ID for that purchase is found as</p>
  
  <pre><code>Order ID  &lt;19 Digit number&gt;.&lt;16 Digit Number&gt;
    say &lt;1234567891234567891&gt;.&lt;1234567891234567&gt;
  </code></pre>
  
  <p>According to Google, </p>
  
  <blockquote>
    <p>The order number itself is a string consisting of numbers only, with a
    format assigned and managed by Google.</p>
    
    <p>For transactions dated 5 December 2012 or later, Google payments
    assigns a Merchant Order Number (rather than a Google Order Number)
    and reports the Merchant Order Number as the value of orderId. Here's
    an example:</p>
    
    <p>"orderId" : "GPA.1234-5678-9012-34567"</p>
    
    <p>For transactions dated previous to 5 December 2012, Google checkout
    assigned a Google Order Number and reported that number as the value
    of orderId. Here's an example of an orderId holding a Google Order
    Number:</p>
    
    <p>"orderId" : "556515565155651"</p>
  </blockquote>
  
  <p>The orders which are shown at the merchant page are in the following format:</p>
  
  <pre><code>"orderId" : "GPA.1234-5678-9012-34567"
  </code></pre>
  
  <p>Questions:</p>
  
  <ol>
  <li><p>Is the OrderId other than the format  is considered as fraud?</p></li>
  <li><p>How to validate an actual purchase in case of fraud orders (i.e Order ID  &lt;19 Digit number>.&lt;16 Digit Number>)?</p></li>
  </ol>