I'm not sure what the correct instance is to report the ignorance of Tucows as registrar. If it's ICANN or whatever, I'm fine to report to them that Tucows refuses to take action to cut malicious use of the domain name for the fraudster.
If many from here report Tucows registrar for their negligence, then that might put enough pressure on them to reconsider their lame stance.
I will report them for not being willing to take action as well but we need to know what the right party to send those reports to are and who is the correct higher authority than Tucows.