What exactly is your proof that they're the same person? That they both sent tokens to the same address? Last time I checked, that isn't adequate proof of being alt accounts. I don't see any other link between these two accounts except that they enrolled in the same campaign. Last time I checked, that isn't adequate proof of being alt accounts either.
Am I missing something?