title: How to stop hacking in-app purchases in android
body: <p>I've implemented in-app purchases in my android game and did all verification steps available out there like sending receipts to server with token/developer payload etc for authentication purpose and every thing is working fine. However, I discovered some of the users are sharing in-apps by giving their account details. Here is my understanding,</p>
  
  <p>In my game, I use google play games services (GPG) to get unique user id and when you purchase any in-apps, I link that purchase with your id and send to server for authentication. But here is the issue, GPG account and google play store account could be different. In that case, when I restore all non-consumables inapps, I send them to our server for authentication and then link them with the current logged in GPG account. In this way, users are taking other users GPG account and login the game so all purchases get restored and assign to the new GPG account. </p>
  
  <p>Is there anyway I can get playstore account details through inapp receipt to know who is the genuine buyer of it?</p>
  
  <p>Any ideas would be appreciated!</p>