My bank generates virtual numbers for free
Even if the scammer rotates a new virtual number each time, the high number of cancelations on them is enough to trigger inspection and a personal ban (since they still need their name/address on all the virtual numbers).