It depends upon the instance.

@SpaceLifeForm I would need an example of an instance doing it this way rather than to the user's email.

It does not have to be the instance itself, just that they allow the phishing behaviour because they can not moderate enough. The best you can do is report and block.

There is no annoucement when an instance kicks a luser to the curb. People may notice the reduction in noise.