You figured out a way to do it (and people will set up businesses solely to do this) without having to think too hard. The creative things fraudsters will do is pretty wild. The time horizons they'll work on is also surprising - sometimes they move fast, sometimes they are quite patient and pose as an established business. And... sometimes they start out legit and then go to fraud when their business starts failing.
Give these guys a break - they are trying to onboard customers as fast as possible to reduce the headache involved. The only way to do it is automation. There will always be cases where things go wrong.
And sometimes the scammers will buy legit, aged accounts, or take them over, so just because an account has been in good standing for years, with what looks like real human interactions with support, isn't enough of a signal to know that a scam isn't taking place from that account.
Give these guys a break - they are trying to onboard customers as fast as possible to reduce the headache involved. The only way to do it is automation. There will always be cases where things go wrong.