Yep, anti-fraud and anti-scam is an exercise in game theory.

The more explicit you are with the rules, the more specific bad actors will try to weave around them. It sucks because it means the scalable, machine-assisted review process comes up with more false positives, but it's a two sided market and the marketplace owners care more about the users than the devs.

I feel like the U.S. tax code is a good example of when you try to go more explicit with the rules.