Players able to test regional pricing of their gamepasses outside of their experience

[RebornEnder (DOTBender)]

Roblox recently released a new feature “Localized Pricing” but that came with a serious bug!

The Bug

So you can test the regional pricing of your gamepasses using the Dynamic Price Check feature, but the thing is that it’s not limited to the game in which the gamepass resides under where it states in the page that its meant for "your Roblox experience"

Many roblox games have been impacted by this bug including the well known Pls Donate where they had to disable global events as you can easily set your alt as a tester, set the price point to 1 and buy the main account’s gamepass which will give you many in-game perks reserved for real high purchases!

Step-by step guide on reproducing the issue.

1. Create a gamepass under any owned experience
2. Set the price to an ridiculus amount like 999999999 and enable regional pricing.
3. Click on Dynamic Price Check
4. Add an alternate account as a tester
   
5. Select price pinned as the testing type and choose the lowest amount (1 robux)
   
6. Click on Enable and wait for it to finish the process.
   
7. Buy the gamepass from the alternate account in a game owned by somebody else like for example haz3mn's Pls Donate
8. You bought the gamepass for 1 robux when you should’ve paid the full price instead as you bought the gamepass in a game to which it dosen’t belong!

Expected behavior

If everything was working correctly you would’ve had to pay full price for the gamepass as you bought the game pass in an expirience to which it dosent reside under!

[GalacticInspired (Galactic)]

What is the actual problem though? Is the purchase receipt saying that a gamepass was purchased for 99999 when you actually bought it for 1?

[RebornEnder (DOTBender)]

Yep, exactly and it’s hard to detect as you can never trust the client

[Inkthirsty]

ngl i thought it was supposed to tell the server how much the player paid for an item but i guess it just returns the price of the item instead

[ZNoob_x (Lucille)]

Is there any way to prevent this in these donation games while the bug is still being fixed by Roblox?

[RebornEnder (DOTBender)]

I mean you could make a localscript that sends product prices for product ids via a remoteevent and a server script that compares the prices that the server sees vs the prices the player sees, you would have to somehow encrypt the remote as exploiters could easily send their own data thru the remote

[bvetterdays (roman)]

You’d think that the fact that three separate bug reports have been made on this problem would signal to engineers that this is a critical issue:

New Vulnerability Affecting Donation Games

Due to the newest regional pricing update, players are now able to purchase gamepasses at a lower price than what is stated. The game thinks the player purchased at the highest price, and therefore creates inaccurate stats. Expected behavior Some sort of metadata stating if the gamepass that was purchased was using regional pricing at the time of purchase. Or even better, a receipt callback for gamepasses stating how much the player paid for the pass, just like for dev products. A private mes…

Critical Exploit via Regional Pricing Allows Gamepasses Product Abuse

A recently discovered exploit allows users to bypass intended gamepass and avatar item pricing within experiences by leveraging regional pricing differences. This is combined with test accounts added through the user’s own experience, where the passes are hosted. The exploit manipulates the perceived transaction amount, creating major discrepancies between what developers expect a user to pay and what is actually paid. [image] This bug severely impacts developers who rely on item sales for mon…

… but apparently not. This issue was brought up to them internally by developers of Pls Donate, yet so far all they’ve been doing is downplaying the issue’s significance and refusing to provide any meaningful solution.

Feel free to like my reply here that goes into more detail on the issue:

Not receiving purchase confirmation until player press "OK" in the prompt that is After the purchase

So you’re reluctant to implement this minor change citing ‘backwards compatibility,’ yet your team recently released a feature that has decimated one of the most popular games on Roblox, and you’re refusing to revert it because a feature that is “coming soon” will address the issue? Last year, you guys made a similar breaking change that caused PLS DONATE and other donation games to have to remove support for avatar items in their experiences due to a Roblox change making it impossible to…

[RebornEnder (DOTBender)]

All we can hope for is that the issue becomes so bad that Roblox will have to eventually fix it.

[Artafac911]

The problem is — and always has been — that Roblox either refuses or is technically unable to return the price paid via their parameters.

So far, we only receive the following information:

• player: [Instance]
• gamePassId: [number]
• wasPurchased: [boolean]

Unfortunately, we do not receive the wasPurchasedAtPrice! This is the only piece of information missing. Please, Roblox — add this parameter!

[bvetterdays (roman)]

Funny thing to note:

@bvetterdays

And the most ironic part of this entire situation? Engineers had the audacity to use a PLS DONATE booth as an example photo in the documentation for the exact feature that has now decimated their game’s entire economy. Coincidence? I think not.

Also, cross-posting this reply here:

Not receiving purchase confirmation until player press "OK" in the prompt that is After the purchase

To demonstrate just how many players are abusing this issue: we’ve had almost a 10,000% day-by-day increase in fake donations after this exploit emerged. Hundreds of players are cycling through each and every donation game to see if these exploits work and trying to abuse them to gain benefits unfairly. This issue needs to be addressed. Ideally, the development of ProcessReceipt for avatar items and a new callback that shows the gamepass price in the purchase finished event should be prioritize…