I agree this is what his issue is likely to be.

I'd be pretty surprised if those accounts were obviously using the API, too easy to ban them by application.