Why don’t you just use a different distribution mechanism that prioritizes existing customers? Real buyers can’t beat the scalpers anyway. There is no bot protection that works. Even if it did scalpers can checkout faster and make more attempts than your regular users using manual methods.