If it gets that bad; Google can do what they already do with business listings - send a letter to the physical address matching the ID, containing a code, which then must be entered into the online portal.
Do that + identity check = bans for virus makers are not easily evaded, regardless of where they live.