Is there any measure put in place to ensure that the number of downloads is nor being farm by certain individuals or groups? Did you have any measure to look at duplicate IP addresses? Most of them will surely not use VPN since they will not be aware that you are taking such measures. KYC is extreme for a token that is not yet available in the market