I’m not super knowledgeable about this, but couldn’t Nintendo fix this problem by just keeping these ‘tickets’ stored on a user profile on their end? At that point any ‘ticket’ would have to be associated with a specific account rather than just showing up and redeeming one.