I report bots that I have no proof of botting all the time, and a few days later I’ll have a mailbox full of notifications from Blizzard that actions have been taken based on my reporting.
Typically I find if it looks like a duck, quacks like a duck, and buys gold from RMT sites-
It’s probably a duck.