You need to follow up the payment barrier with identifying bots and the info (cc+contact) they used to verify their identity.