Yeah, we do those things.

1) they’re not foolproof

2) there is a delay in aggregating the data

this has annoying effects when the game has a trial period/goes on sale/has lots of cheap CD keys floating around.

3) if you weren’t delayed then the cheaters get better at adjusting to how you catch them.

We actually do a lot of statistical analysis, but it works in tandem with endpoint anti-cheat, and would hardly work at all alone.

I know when I spent a lot of time dealing with fraud in a different market, the most effective tool was to catch and shadowban the accounts rather than banning them.

If we banned them, they just created a new account and kept doing the same things.

When we detected them and the isolated them from all other good standing accounts, only allowing them to interact with other shadowbanned users, it virtually solved the problem. Normal users went about their day and the cheaters/fraudsters wasted a lot of time never getting through to anyone.

In gaming it seems like creating a cheaters purgatory where they are stuck competing against other cheaters forever would probably end up being its own special league after a while. Like when people suggested steroids in pro-baseball should be legal.