Time for action—finding a user and suspending them