The problem
Paying people per view is the easy part to describe and the hard part to build. The moment real money is attached, every view is worth faking: repeat views, emulators, device farms, one person on five accounts. Get the accounting wrong and balances drift until nobody trusts them.
The solution
Money is never a mutable number. Every credit, hold, reversal and payout is an append-only ledger entry, so a balance is always derivable and a takedown can be unwound months later. Views pass a fraud pipeline before they earn anything — server-timed watch checks, device and IP caps, own-device detection and Play Integrity attestation — and ad revenue is confirmed by Google-signed server-side callbacks rather than trusted from the client.
01
Resumable multipart uploads direct from the browser to Cloudflare R2, bypassing PHP upload limits
02
Append-only wallet ledger — holds, reversals and payouts all reconstructable
03
Fraud pipeline: device and IP caps, 24-hour repeat rules, own-device detection, Play Integrity attestation
04
AdMob rewarded server-side verification — Google-signed and replay-proof
05
Withdrawals to UPI, bank, PayPal or USDT with encrypted details and idempotent requests
06
KYC above a configurable lifetime threshold, with encrypted PAN held for admin review
07
Referral commissions paid once a referee clears their earnings hold
08
Hosted multi-tenant Telegram bot engine with per-bot webhooks and signed watch links
09
Short links with Open Graph previews, verified App Links and Play Store install referrer
10
Staff roles — finance, moderator, support, admin — each scoped to its own queues
11
Nightly cron: SHA-256 verification, de-duplication, block list and ledger reconciliation
Our role
Sole developer — platform architecture, the ledger and payout model, the fraud and view-verification pipeline, the REST API, the Flutter client, the admin console and the Telegram bot engine.