diff --git a/src/routes/verifyToken.ts b/src/routes/verifyToken.ts
index 55b6faa..ac5b5f7 100644
--- a/src/routes/verifyToken.ts
+++ b/src/routes/verifyToken.ts
@@ -41,6 +41,12 @@ export async function verifyTokenRequest(req: VerifyTokenRequest, res: Response)
         }
     } else {
         // Check Local
+        const localRegex = new RegExp(/[a-zA-Z0-9]{40}/);
+        if (!localRegex.test(licenseKey)) {
+            return res.status(200).send({
+                allowed: false
+            });
+        }
         const result = await privateDB.prepare("get", `SELECT "licenseKey" from "licenseKeys" WHERE "licenseKey" = ?`, [licenseKey]);
         if (result) {
             return res.status(200).send({
@@ -48,6 +54,12 @@ export async function verifyTokenRequest(req: VerifyTokenRequest, res: Response)
             });
         } else {
             // Gumroad
+            const gumRoadRegex = new RegExp(/[A-Z0-9-]{35}/);
+            if (gumRoadRegex.test(licenseKey)) { // check against regex
+                return res.status(200).send({
+                    allowed: false
+                });
+            }
             return res.status(200).send({
                 allowed: await checkAllGumroadProducts(licenseKey)
             });