Location can be faked as well (besides not necessarily being accurate). You could look into bluetooth beacons that an app can detect. In the end, if there is an incentive for the organizer to fake attendance they can do that in multiple ways. However QR codes which open your app or a webpage where the user is logged in can have additional detections. Always same IP and user-agent would be an obvious indication of fraud etc.