This can be largely automated using something like minFraud, Signify, etc.

However, you still need to use the same basic process:

Step #1 - No instant feedback

Step #2 - Your antifraud SaaS provider / process / whatever

Step #3 - Reject anyone who fails step #2 after ~24 hours.