Whether it was him or not, we have no type of proof that indicates either one, so I say ban his account anyways. Let's see it as this: they aren't punishing the person, they are punishing the account. No matter who was behind the controller, the account that was used was in the wrong.