The android market (oops, i mean Play) has an option to require entering a PIN before a purchase is made.