I see, I see, an idea: send a nutzap (nip61 kind 9321) event to the relays when sats are received. This way, your service would require almost no trust, and you wouldn't need to handle token storage or claim operations.