The list of Tor nodes is public so it's trivial to detect a user is using Tor you just have to check the IP.