Just ban them and send them a pm asking if they actually send the phishing messages or if they've been hacked? Are you high? They're already intentionally deceiving people with their phishing links, I doubt they'll feel any moral qualms about lying to me, if they don't just ignore me.
And how do you twist "the damage has been done and I literally lack the ability to do anything about it" into I don't care?