I think this is the main thing preserving the (miserable) jobs of people at call centers.
But I'm not convinced. With today's models, is it really that much easier to defraud an AI agent than a human?
I do think a lot of people are much more WILLING to try and defraud an AI agent than a person, so maybe that's the difference. There's a parallel there to people being much more willing to mess with Waymos. I think both are a huge shame.
The difference is AIs are identical and don't learn. If you figure out how to defraud a human once it may not work on the next guy. If you figure out how to defraud an AI once you can repeat it indefinitely until the AI is shut off.
Largely this can be solved the same way it is at a lot of call centers: first line support isn't actually given permission to do much more than the customer can do themselves.