Maybe limit total number of transfers among all tickets. Because it should be a small minority of legit transfers.

Scalpers should be less likely to take a chance their transfer will be denied, whereas to a legit customer and friend ticket is otherwise worthless and just a best effort anyway.

Or beyond the first X% of transfers you do more rigorous validation. Like asking for the original buyer to call in to confirm in realtime. Something not easily automated.