> Amazon has a huge problem with packages being sent to fake people at different addresses.
This usually involves those people getting weird packages and not doing anything with them, it doesn't require attacker-controlled addresses.
This could work, but the issue here is that a lot of these scams rely on the "zero cost"-ness of turnup and use that as a asymmetry. If it costs you nothing to turn up new scam-accounts, and it costs me something to investigate and remove them, you win. If it costs you $10 to create new scam accounts then as long as I can get the EV of a scam account below $10, the scam isn't worthwhile.