edns-client-subnet (if present) can catch some frauds, too.