Are these just scare-tactics, because anyone that has their hands on a multiple account script, can just use any of the million relays.
You should have made the registration require captcha to prevent this from happening. There’s nothing you can do to prevent bots if you don’t use captcha.