FIFA’s solution seems reasonable. The tickets are auctioned. EDM festivals usually have an earlier round for people who attended previous iterations which is similar to this approach by Spotify.
One way is to run an auction and provide every attendee on site with a credit code they can apply to next year’s auction. That way you tip the scales slightly towards previous attendees in a way a scalper can’t reliably access.
Another way is to run separate auctions: one for previous attendees, one for fan club members, and one for GA.
The aversion to auctions transforms everything into a lottery but I can see why they do it. The event operator takes all the heat and the artist keeps much of the benefit.