Block devices with cloned MAC addresses

RouterOS General
1

Hi.
In my hotspot I use MAC to allow some customers to access.
Recently, some people started using some Android MAC Changing Apps on their phones to get a list of the connected MACs and they just have to change their mobile MAC address to any of my registered customers MACs and they immediately will have access to the network.

This is also will prevent the registered innocent victim customer from accessing the network as long as this CLONE is connected.

Is there any thing I can do to prevent this from happening .
Any ideas or scripts I can use to allow just my registered customers to access the network.

By the way, all my registered customers use mobile phones. No computers.

2

The only decent way is to use EAP / 802.1x for authentication so there are per-client encryption keys.

3

Thanks for the reply, Sir.
Is there a link to a guide on how to implement this approach.
Thanks