Delayed banning seems to work well for multiplayer game anti cheat systems (like VAC).

These problems are essentially the same, some of the know-how can be easily adapted between them.