One drawback is ppl could sell their private key. There does not seem to be any way around it, except to embed something about the person's identity (eg, name) into the message, and have the person show their photo ID to the business. But that is a tradeoff of privacy for security.