When I needed to stop spammers on an individual basis, I had to set them as underage in their profile in the control panel. That disabled their ability to use the private message feature.