This does not scale, the amount of abuse is huuuuge. But I think with a prerequisite, it could:

Companies should be required to provide access to a service that verifies identity. I know such companies exist, so it is doable. And then, once it is provable that they are dealing with an actual human who can be identified, your rules can be applied.