1. A system comprising: a processor; one or more memories communicatively coupled to the processor, the one or more memories having stored instructions that, when executed at the system, configure the system to implement: a measuring component that determines a level of suspicion that a user account file storage space is being abused, the measuring component measuring an amount of outbound data sent by the user account according to each of a plurality of file types, the measuring component measuring an amount of outbound data per file type and a total amount of outbound data per the user account, in determining the level of suspicion, wherein the measuring component is configured to compare the amount of outbound data per file type and the total amount of outbound data per the user account to one or more threshold values; and a cost assessment component that imposes a cost on the user account when the account's determined level of suspicion satisfies a threshold value, the cost including at least a delay imposed on download requests received through the account, wherein the amount of delay dynamically adjusts based on the level of suspicion.