Removed participant (bomber) able to rejoin repeatedly

Last night we had a bomber that kept coming back into the meeting after he was removed.  He had changed his name so we didn't know it was him until after we let him back in.  The setting is correct, " Allow removed participants to rejoin is disabled".  How was he able to do this?  I reported him but there was no email.