If the social engineering can get past 2FA, then the only options you have are 1. The registrar has offices in your country, so you can take legal action again

If the social engineering can get past 2FA, then the only options you have are 1. The registrar has offices in your country, so you can take legal action against them. Of course, this also means that your despotic government can force the registrar to ban you, etc. 2. The registrar is not in your country, so you depend on their benevolence to reverse the social engineering.