Our app is based around a consumable IAP, which provides a personalised service to customers. Each IAP purchased requires a work by our staff in terms of time and therefore financial investment.
We got quite a shock today to find 63 IAP refunds. Usually, there's one every few weeks but but nothing near this scale.
I am trying to understand if there are any protections in place for developers. Documentation does not mention any way one could make a link between refunds and users/purchases to be able to stop providing services to abusers.
Does Apple at least limit the refunds to 1 set of refunds per customer or are people left to abuse the system?