Preventing such attacks is one of the main reasons why custom hardware is required. For more info, search for "spoof" in this section of the whitepaper:

https://whitepaper.worldcoin.org/technical-implementation#wh...