A simple dropdown saying "citizenship" and then turning red with an error message saying "United States is not allowed. Did you mean United Kingdom instead?" will encourage most people to put something else.
Then the company can fairly legitimately say "The customer lied to us about their citizenship. We took all reasonable measures to determine their citizenship, because there isn't a freely available database of which people have which citizenships"
