Various embodiments are provided for validating commands for hacking and spoofing prevention in an Internet of Things (IoT) computing environment by a processor. An eligibility of a user to issue a command to an IoT device may be cognitively determined according to a digital footprint and a location of the use. User intent may be established according to the digital footprint. The command issued to the IoT device may be validated according to the location of the user and the user intent.