> Is there a way around this shitocracy?

If you are in EU you could try complaining to your local DPA. That certainly sounds like "automated decision which produces legal effects concerning him or her or similarly significantly affects him or her" which is against article 22 of GDPR. Or you could consider suing them directly at least for the refund.

Outside of EU maybe try passing law like GDPR to actually get some rights back.