Isn't that the point of "This could be a form". The chatbot would have certain rules that it would need to follow and I don't see why those rules couldn't be translated into a form.

I wouldn't underestimate the mental capacity of scammers, it would only be a matter of time before they would know exactly how to prompt the bot to issue a refund.