I think CM should implement KYC before payment is made, the goal is to narrow down the space for bounty cheat. When CM implements KYC, Bounty cheats will be overwhelmed preparing personal data to complete the KYC process. Such as Email, Personal Data or documents (such as bills or bank statements) that show a person's name and physical address.

I'm sure after YOSHIE big find in SantaCoin campaign won't make bounty cheaters repent, because they can immediately create hundreds of new accounts in a day.
Yes, there is no way to stop the bounty cheat, but CM can still punish their sins with KYC before distribution is done.

YOSHIE you are amazing.