interesting problem! I think each device could have its own signature (like a mac address), and each user has its own signature (like a crypto wallet). multiply the signatures to get a unique identifier of their relationship. if that changes, and the original user contests it, then shut down payment to new user.