BLOCK Spoofing

My request here is concerning to a technical issue. It is: Getting MAC Address software and spoofing. This problem is widespread with ISP who are using MT OS Router.

The Issue is that the Mikrotik Router is hosting the actual Mac Address as [D-dynamic] and not the spoofed one. and it is can be removed or blocked from (host) list.
I have made a script to remove this MAC Address from / ip hotspot host
/ip hotspot host remove [/ip hotspot host find dynamic=yes], interval is 00:00:01
but it’s doesn’t work, all what this script is doing, it’s making intruder getting slow internet connection. Then I tried to make this
/ip hotspot host make-binding [/ip hotspot host find dynamic=yes] interval is 00:30:00
the last one make binding ok, but not block the MAC Address (type=blocked).. and did not work.
so it still spoofing.
I think it is possible to blocking spoofing without close ARP port, and prevent intrusion by something like this:
/ip hotspot host make-binding type=blocked [/ip hotspot host find dynamic=yes]
Or /ip hotspot host ip-binding (add) type=blocked [/ip hotspot host find dynamic=yes]

The point is: how to make ip-binding with block type by using one script or two??.
Please Help

Regards

Anybody assists?