For starters, packages should probably be considered non-transferable. If someone buys a package, they shouldn't keep the existing rankings and ratings.

It would be challenging to be proactive about it, but it was be a clear solution when they get caught.