How luci would do it:
- create a special group Membership with extra permissions assigned
- put the paid membership users into that group
- when they do not pay simply remove them from that group so they become only Registered group members until they pay again
Something like that?
Banning is more complex measure usually taken mostly against individual spammers and I am not sure you can automate this somehow.