You should notice the pattern I did. Plus all of their claims come from different IPs, I'm working out a way of verifying this (perhaps a way of implementing three 'safe' addresses a user can claim from - 'Home', 'Work', 'Friends House' and any claims after that require manual cashouts and email verification.