Anyway to detect fake/simulated beacons?

We are developing an app just like others did for restaurants. We want customers can only place orders while they stay in the beacon range. I know that others won't get access to our beacons if they don't know our UUID, but take one step advance, what to do if bad people know our UUID and simulate a beacon and place orders?

An idea that confirming MAC address is good, but cost some time to connect to the beacon.

Thanks in advance.

Hey Matt—take a look at our newest feature, Secure UUID:


wow thanks so much, for both the answer and patience.