Or, Toms could just delete this persons user accounts.
Then engage the following policy:
Do not permit the posting of URLs, even unlinked ones, in any new users first 10 posts, or within 72 hours of a new user account being created.
It's not hard for a software machine to notice something spam related in this day and age.
Girlfriend Who Stays Faithful
identify the player through facial recognition software
If someone other than the "boyfriend" tries to play the game, the virtual girl won't respond in her usual ways and instead will ask things such as "Who are you?"