I don't think you can KYC your way to stopping spammers without stepping on some protected classes.

I think that having a blacklist with some ID (bank account, national ID, CA cert) that's hard to replace is a good compromise.

You could try giving people moral purity tests before you let them in (doesn't some of the tildeverse work like that?) but I think it's a dark road.