No, the automated system does the first ban wave, the "trip-wire". Then are all the accounts flagged as suspicious, and not including they do investigations into the ones previously banned to check out trade transactions (Hmm, this guy was f2f trading dozens of decks at no cost), and a lot of times, they will check for guild logs, even though those seem to be the ones most missed, not sure why.