User Profile

Our app is based around a consumable IAP, which provides a personalised service to customers. Each IAP purchased requires a work by our staff in terms of time and therefore financial investment.We got quite a shock today to find 63 IAP refunds. Usually, there's one every few weeks but but nothing near this scale.I am trying to understand if there are any protections in place for developers. Documentation does not mention any way one could make a link between refunds and users/purchases to be able to stop providing services to abusers.Does Apple at least limit the refunds to 1 set of refunds per customer or are people left to abuse the system?