When the game was first released, it is highly unlikely that anyone in Malaysia should be able to have 3 or more pokemons with over 2000 CP. The usual excuse is that they play abroad, but then it needs to be proven that they are spoofing rather than telling the truth! Which is harder on YOUR end to prove, when you make the complaint. However, once you complained, will Niantic check server records? What kind of actions will be appropriate without spoiling your own market?

Indeed. But with over 8 million users, will they even bother with a few spoofers?

They probably add some algorithm that checks let's say... If difference in GPS points over time is more than you can travel in a day at 100km/hr then soft ban 24 hours.

Player 1: Playing in Ipoh but spoof to show in KL, so some GPS jump in between back home, then total distances between GPS ping may be too much to be explained by travels... get soft ban 24 hours cannot play

Player 2: Playing in KK but spoof in Australia, but able to disable GPS show he/she in KL, so appear to play in Australia for a few hours => no ban

Cannot catch all spoofers