We log all messages to mongo, so this is as simple as finding any message from the violator, and purging