Next step is needing your ID and associating yourself with the device at the time of purchase whether in store or online.
At least they’re only started doing it now. My country did that around 20 years ago. Back then kyc by filling physical paper form but now with mobile app id card and face scan. Not like it actually solve the problem of scammers and spammers at all, they just paid some undocumented migrants to be the proxy and be able to keep their scam and spam operations still.