Let the right players in.

Create clear age and identity checks around registration and sensitive account actions.