Overcharge debit card scam

Today, 2 young men approached our door collecting donations for school. My wife was home and decided to help out with a $25 one-time donation. They scanned her card using the tap feature, showed her the $25 charge. She then got a phone notification from her bank app for 2 charges equaling ~$3,000. She said they had charged her incorrectly, and the 2 men ran.

She called me, and we called the bank immediately. The charges were less than 5 minutes old, and they were pending. We talked to the fraud dept, and they said since she "authorized" the payment by tapping her card, there was nothing they could do. I argued we authorized a $25 payment, not a $3,000 payment. They said that's now how it works. Once you swipe/tap/insert a card, you have authorized whatever payment they charge, and they can’t stop or cancel the transaction.

First, I can’t believe the bank couldn’t do more since the payment was pending.

Second, it seems like there’s literally no protection for someone once they swipe their card. If you swipe your card, you are literally trusting that the person will not take more than they said.

Is there really nothing the bank could have done?