Couldn't you limit it based on credit card number, a corresponding phone number, a Facebook ID, verified address, etc.? Even if it doesn't fully limit it, it perhaps makes it harder.