I used to get tickets from a former player who I had known his whole life, and I would get a phone call from someone at OSU (don't know if it was the Athletic Department or Compliance Department). The player had to leave the name and phone number of each person a ticket was for. I received a call before every game asking how I knew the player, and if the ticket was for me.
When I picked the ticket up at the player will call, whether at the 'Shoe or on the road, the tickets were given at a location that did not allow you to go back outside (if you were of the mindset to try to sell it), and had to enter the stadium immediately after producing an ID and signing for them.
So it seems to me that they already had this covered.