The problem with SES is that they ignore abuse reports. They even admit that they only block you if you have more than a given complaint rate. That is how gmail works, but for a bulk email service they really need to investigate every complaint.
That's why you need to investigate, rather than simply blocking the user. If set up correctly it should be mostly automated...ask the customer where the email address came from, then take appropriate further steps. SES does none of this, which is why they have this problem.
I've just blocked SES's ip ranges on my servers.