I'm doing a similar task, with the difference that the analysis preference is for a Dating service. Party application to calculate the spammer offers different services... i.e. whose purpose is NOT to meet you.
Each user has some indicators (we have more than 50). Information is collected at each step of polzovatelya of finding the site. Next, we scrolled through the data statistics, and identify the clusters of users. Abnormal users "pagecity", those whose distance in n-dimensional space with more than two medians of the cluster.
Clusters
ru.wikipedia.org/wiki/%D0%9A%D0%BB%D0%B0%D1%81%D1%82%D0%B5%D1%80%D0%BD%D1%8B%D0%B9_%D0%B0%D0%BD%D0%B0%D0%BB%D0%B8%D0%B7
www.statsoft.ru/home/textbook/modules/stcluan.html
www.nickart.spb.ru/analysis/cluster.php