Having to invite people in person and maintaining a network of trust could work. There would always be people ignoring friends selling accounts to bots, but ultimately I guess it would be mostly too costly.