Just making some speculation about some things I've seen. PB violations are logged by the streaming services but an Evenbalance Global ban typically isn't. In the case of a standard violation, the server is in communication with the PB client when the client detects the infraction. A global ban issued by Evenbalance can happen without communication to the server and prevents the GUID from connecting to a server running punkbuster. I'm not sure the server would even report that a person with a global ban even attempted to join. The global ban issued directly by Evenbalance is the highest tier of ban I think they can do and essentially disables the account.

There is a hack feature that allows a cheater to shoot multiple vehicle bullets per shot and even selectable bullet types. So a LAV would shoot APFSDS, HE and canister all at once. The cheater could then choose to increase the amount of shots per firing. The shot increase sometimes shows up in spectator mode as an impossibly large magazine, like 36 rounds loaded on a LAV or 3 loaded shells on a tank (assuming 3x increase). It won't show up on cooldown based vehicles like the AA, scout, jets, secondary machine guns, vehicle machine guns, or transport miniguns.

Both of those are easily seen in spectator mode for non-cooldown based weapons. However, there is a sync bug in spectator mode that miscounts the magazine as it depletes, leading to staggered decreases and corrections in ammo count. It is a different story if this is happening on a local recording though.