After a bit of research and what not, I worked out the following things:
They dont have a spy as such. H3llfire gave them the teamspeak password, which allowed them all to go on on whatever day it was, Sunday I think. The only reason they picked us off on Sunday was because Voodoo Josh noticed Di members logging in f2p and then they sat at gate waiting for 30 minutes for us to log in.
So yea, the main problem is people are still be extremely careless. People think its ok to log into an f2p world then turn private off when they have no honour added.