Having been told to implement this sort of thing at least once, it's not even heuristic. It was exactly things like "if firstName == 'Saddam' and lastName == 'Hussein' then lockAccount()". Keep in mind this was years after he was dead, for some reason the big list of prohibited persons the US circulates includes lots of dead people

[dead]