Is there a way to detect the IP address of the user and block it once the bot has been used once? It would be an additional layer to discourage the serial test-takers

(not that it can't be worked around).
We don't know their IP. User information provided by telegram is pretty minimal