Without getting into too many details... it's a more data-driven approach than you might think. We can see patterns of scale, engagement, frequency, etc. and we're working with a lot of info. The difference between a spammer/scammer who is attacking or trying to exploit the site vs., say, a very enthusiastic reader, is pretty big. :)