Should I show a blank landing page to suspicious visitors instead?

It denies the clicker anything useful, but it sits on the wrong side of the billing timeline just like a firewall rule. The charge already happened. It also adds a risk blocking does not: if you misjudge a genuine buyer, you have shown a real customer a page with no phone number and no form, and nothing in your reporting will ever tell you.