>> They collected a ton of my sensitive information (address, phone, bank account, etc)

> Yep. OP's only real recourse is to just try again in 6 months or a year or whatever and hope that their ML algorithm evaluates their data differently.

And what change their identity? They already have their PII and banned them for life.