We run a rewards app based on top of Strava API
However we are getting a large number of people faking their Walks, Runs, Cycles using tools like “GPS Joystick” on Android.
There are many tools to fake Strava activities, and we are concerned that a rewards app on Strava can be exploited heavily.
We would like to suggest that the Strava mobile app has extra security features to detect such apps, and pass a flag through to the API so that consumers can decide what to do with fake data
We suggest that the Strava mobile app, also includes Cellular network GPS verification, accelerometer sensor verifcation, to verify that the mobile device “was actually moving” when the activity was recorded
Kind regards

