@capgo/capacitor-mock-location-detector

Detect simulated GPS locations using layered, App Store-safe checks on iOS and Android.

Snapshot

• Plugin name: @capgo/capacitor-mock-location-detector
• One-line value: Multi-layer GPS spoofing and developer tooling detection for Capacitor apps
• Maintainer: Capgo
• Status: beta

Problem & Scope

Why this plugin exists

Tools like PoKeep and iMyFone AnyTo can spoof device location. A single flag such as iOS isSimulatedBySoftware is not reliable against every spoofing method. This plugin combines multiple independent signals so your app can make better fraud-prevention decisions.

What it does

• Runs layered checks: system mock flags, developer options, known mock apps, movement heuristics, and motion correlation
• Returns a scored LocationIntegrityResult with per-check details
• Supports continuous monitoring with locationIntegrityChanged events
• Opens the best-effort settings screen so users can disable developer/mock tooling themselves

What it does not do

• Cannot programmatically disable Developer Mode or mock location settings (not allowed by iOS/Android)
• Cannot guarantee 100% detection against every future spoofing tool
• On iOS, Apple provides no public API to read the Developer Mode toggle directly

Compatibility

Install

npm install @capgo/capacitor-mock-location-detector
npx cap sync

Setup

iOS

Add location usage descriptions to your app Info.plist:

<key>NSLocationWhenInUseUsageDescription</key>
<string>We verify your location has not been spoofed.</string>

Optional: declare URL schemes for companion spoof apps you want to detect:

<key>LSApplicationQueriesSchemes</key>
<array>
  <string>anyto</string>
  <string>fakegps</string>
</array>

Android

Ensure your app requests runtime location permissions. The plugin declares coarse/fine location permissions in its manifest merge.

Usage

import { MockLocationDetector } from '@capgo/capacitor-mock-location-detector';

const result = await MockLocationDetector.analyze({
  requestLocationSample: true,
  minDetectedChecks: 1,
});

if (result.isSimulated) {
  console.warn('Possible GPS spoofing detected', result.checks);
}

// Guide the user — apps cannot disable developer mode automatically
await MockLocationDetector.openDeveloperSettings();

Run a single check layer:

const mockFlag = await MockLocationDetector.runCheck({
  check: 'system_mock_flag',
});

Start monitoring:

await MockLocationDetector.addListener('locationIntegrityChanged', (event) => {
  console.log('Integrity changed', event.riskScore, event.checks);
});

await MockLocationDetector.startMonitoring({ intervalMs: 30000 });

Check layers

Capgo Links

• Plugin docs URL: https://capgo.app/docs/plugins/mock-location-detector/
• Website/docs repo: https://github.com/Cap-go/website

getCapabilities() => Promise<MockLocationDetectorCapabilities>

analyze(options?: AnalyzeOptions | undefined) => Promise<LocationIntegrityResult>

runCheck(options: RunCheckOptions) => Promise<LocationCheckResult>

openDeveloperSettings() => Promise<void>

startMonitoring(options?: MonitoringOptions | undefined) => Promise<void>

stopMonitoring() => Promise<void>

addListener(eventName: 'locationIntegrityChanged', listenerFunc: (event: LocationIntegrityChangedEvent) => void) => Promise<PluginListenerHandle>

getPluginVersion() => Promise<PluginVersionResult>