Largely this can be solved the same way it is at a lot of call centers: first line support isn't actually given permission to do much more than the customer can do themselves.

I wouldn't exactly call that "solved", this still sucks for the customer.

I think the ideal solution would be to track and punish fraudsters, but there seems to be little political will to do anything about petty crime these days.