I'm almost certain that users will never be banned for scamming off-site. I think that putting users that scam off-site into DWC is a better possibility, but I also think that if you're not willing to take 10 seconds to send a simple on-site PM then you're not taking the correct safety precautions and that it's your own fault for not doing so.