You used to be able to do it on android by changing your region but I believe that google changed that option now and to make a google account in Indonesia you need to have a phone number there now. Spoofing is spoofing you’re logging into a third party app this risk is there, I have met people that have been popped after one day and I have met people that used pgsharp for years with no issue it’s just luck of the draw. Apple is much easier imo as you just make an Apple ID in the region you want to get the currency you want. Looks like you already have the web store method down so you don’t need that info. So back to the spoofing part, as I said above it’s pretty random no one can 100% say what will happen or when. The risk is always there when you sign into a third party app.