Thank you everyone for the great responses. Yes i agree and now i need expert opinions on the moves we have planned next:
1. We will verify email addresses with phone number who signed up after downloading and finalised airdrop reward to email address only if verified.
2. Relaunch airdrop for all dummy/bot sign ups as I hope they will fail to verify email and phone.
3. Get legit users after verification in Sl. 1. and 2. go through KYC by signing in to Exchange
4. Get the Exchange Demo Account for learning up and running for users in Sl. 3. meanwhile rigorously test Exchange for real trading
5. Launch Exchange officially.

Expert Advice needed: Does the above order and steps make sense or is there a better way to go about it?
Btw, it's www.tyslin.com. Comments and views are needed and welcome.