They also just use hacked accounts, that might have had something purchased.
Account age and account spendings are not a green flag. Not even 2fa is a protection, as there are cookie theft attacks that circumvent two factor auth.
I didn’t realize that. It really sucks they have to deal with this. Now I get why the auto moderation is so strict.