Of course the best way to catch player with phony second accounts is being able to track their IP address. Using this tracker too you can create a rule that the only way more than one account can from the same computer source is by having one account as a paying member. Also in situations where there appears to be a lot of timeouts against one person, you can close out the dummy account and then lower the legitimate player's account by 1000 BKR. This would discourage cheating.