The checks look simple/unambiguous enough for a bot to do the work. Maybe a dual machine/human approach is the right one: a bot scans /new every 15 min for those factors, and updates a list of suspicious links/accounts, and then humans review this list and take action. Valve does something similar to detect cheaters on CS:GO by the way.