my suggesion is those who are use multiple device and acc story have to not eligible them…qustion is how can they do this…simply launch a social task and when they are use x auth request accept the request and track the ip also check there trx …those who sent 5-10 trx in a single wallet again and again they are the sybil…not eligible them.
use burpsuite to track them…