Simple solution: each voter is given a receipt of their choices and a unique signature for it, and an online website where they can check that their signature was taken into account in the final tally.
With that a fraudsters model have to deal with random checks by any voter.
With that a fraudsters model have to deal with random checks by any voter.