The "fix" is a joke and half-baked.

Stop having the client do any kind of processing and have it do a simple "isOnAccountBlacklist(Target)" check on the server with a simple yes/no return.

The client should not be seeing IDs AT ALL. Honestly shocked at this.