I'm not terribly sure how these instaboost codes work, or how you have them set up currently, but would it not be possible to have the buyer have to register it to their account, requiring to input their username and password upon purchase? If so, couldn't this information be used to lock the code to that account, so it would be invalid for others?