A paid account's sandbox is reviewed by a person before it is halted

When the abuse checks flag a sandbox of an account that has paid, it is held as described above and keeps running, with its processes and files untouched. A person then lifts the hold, which turns the network back on, or confirms it, which pauses the sandbox. Previously, the sandbox was paused immediately.