I just delete their account rather than banning them. The problem with banning is, one could ban an IP that could be used by non-spam users. E.g. a user could use NAT where one IP is used by multiple users.
EDIT: Apparently, the additional question in the registration process works.