There's no huge mystery to it. They flag accounts based on one of two things:
-Server side metrics
-Warden
And then they ban flagged accounts in one go.
There's no human part of the process. Gearing five characters doesn't matter. Hardware id and mac address are irrelevant. Public ip...