How to automatically disable customer account after payment failures?

Is there a plug-in to automatically disable a customer’s account after a certain number of payment failures? My store is undergoing a carding attack. The attacker is using different IP addresses and is using email addresses from gmail, so this seems like the only way to stop it. The attacker is doing this by calling my site’s API so captcha is useless here.