How about you just restrict ticket sales to 1-2 per person and require it to be tied to a name on sale which is verified on use and cannot be easily changed? That's all you need to do.