Even privacy unfriendly methods may not solve the problem.
Buying large concert tickets in China has required the buyer's personal ID since several years ago, and the personal ID associated with the ticket cannot be changed after the order is placed. At the entrance of those concerts they do verification based on ticket, ID card and facial recognition. There are still many scalpers who offers tickets even after they're "sold out", though. What they do is to let buyers lie they forgot their ID cards so that there's a higher possibility of entering with the ID card provided by scalpers (which they used to buy tickets). And by the way, the scalper don't have to provide their own ID card - personal information leakage is so common here.