Almost certainly. I'd guess most of these services are usinf BSSID (more or less mac address of the access point) instead of SSID and not using channel number or signal strength.

If you report GPS position and BSSIDs anytime you see them, you can probably approximate a location when you only have a BSSID. IIRC, precision is fairly low for wifi approximated position, but maybe it's gotten better since I last looked.

If you want to do a test, I'm happy to send you BSSIDs or whatever you need by email (address in profile) and you can geospoof to my house. I run too many APs, so it should work with just mine, but I can sometimes see neighbor APs as well.

Google's api documentation [1] has only the macAddress as a required field, and that you need at least two addresses; but it does accept a signal strength measurement, as well as channel and snr. Other apis may vary.

[1] https://developers.google.com/maps/documentation/geolocation...

Yes I think that would work. I remember moving house before withing the same city and moving our wifi router with us. For a while my phone kept placing me at my old house, when it didn't have a GPS signal.

Most routers these days default to auto channel assignment. And the triangulation near any thicker wall will break down anyway. I'd be surprised if they looked up more than SSID for a match and then adjusted the location slightly based on signal strength.

You're filtering for people using vpns to access your site from a country other than the one they are claiming. They likely aren't criminal operations just users operating outside the bounds of your service. They aren't going to have the ability to do anything but sign up for a vpn service so it works quite well for stopping them.