I'm assuming there's tracking on the invites. So a recursive kick on X and all who X invited would still do the trick. If an IP address appears more than 5 times in an invite tree, ban the /24 or ASN if not from a friendly country for 10 minutes or other reasonable timeframe.
Getting unique IPs in any country you want is trivial for anyone but people building toy bots.
How far up the tree do you kick? Going too far up makes it so malicious people can "sabotage" by botting to get huge swatch of legitimate users banned.
Going to shallow means I just need to create N+1 distance between myself and my bot accounts
That's fine. If it is understood that you might be permanently banned because someone you invite starts doing bad stuff, maybe you'll be careful about who you invite.
