Any information sent to the server can be faked. There is no way to tell if a client is using a blacklisted mod.