How do I stop prank or fake QR orders from people outside the restaurant?

Check that the guest is really at the restaurant. Systems use an OTP before the kitchen fires the order, a location check, or one-time QR codes that expire after payment.

• OTP: Petpooja sends a validation OTP before the kitchen fires an order, and the KOT prints only after confirmation.
• Location check: OrderIt blocks orders from guests not physically inside. Menulux accepts orders only within a set distance.
• One-time QR: Okage issues a QR code per party and per table, cancelled automatically after payment.
• These are vendor features. No independent data shows how well each one works.