Apparently I found my app on some illegal app sharing site where users pay a small subscription fee to get shared access to various web apps, without owning an account of their own.
I have already set my app to log out of other sessions if a user logs in at a device. Is this reliable though?
I heard these sites can spoof IP, so it would be hard to detect based on IP or location.
Any idea how to detect and stop these accounts?