I should leave the shop as-is and just handle the problem via legal venues after the fact ?

Would there be some value in making it harder to shoplift from my store in the first place ?

I'm not looking for legal advice. We pursue legal action when it's possible.

I sense the horns of a false dilemma. Your question is, "How can I tell legitimate customers from illegitimate?" A better analogy would be, "In a retail store, some customers are actually resellers. How can I prevent them from buying things and then selling them to other people?"

Provided everyone follows the specifications, I'm not aware of any reliable way to tell a "legitimate" web request from an "illegitimate" one. Perhaps you should redo your site in Flash, to postpone scraping? (No, I'm not serious.)

So, if I have a recurring problem in a real storefront with say shoplifters...

But they aren't shoplifters -- they are paying you. They are just reselling. If you know what they are reselling at, and succeeding then perhaps you are under-pricing yourself.