diff --git a/appcheck/app/src/main/java/com/google/firebase/example/appcheck/kotlin/ApiWithAppCheckExample.kt b/appcheck/app/src/main/java/com/google/firebase/example/appcheck/kotlin/ApiWithAppCheckExample.kt
index 88b28719a..4dcce5d33 100644
--- a/appcheck/app/src/main/java/com/google/firebase/example/appcheck/kotlin/ApiWithAppCheckExample.kt
+++ b/appcheck/app/src/main/java/com/google/firebase/example/appcheck/kotlin/ApiWithAppCheckExample.kt
@@ -39,4 +39,11 @@ class Misc {
         }
         // [END appcheck_get_limited_use_token]
     }
-}
\ No newline at end of file
+}const appCheckClaims = await getAppCheck().verifyToken(appCheckToken, { consume: true });
+
+if (appCheckClaims.alreadyConsumed) {
+    res.status(401);
+    return next('Unauthorized');
+}
+
+// If verifyToken() succeeds and alreadyConsumed is not set, okay to continue.