As soon as this turns into a race and national origin allegation, e.g. "Indian staff" one loses all sympathy.

The requirement has nothing to do with the staff with whom you are communicating and everything to do with security policy established at senior enterprise levels. The people you are villifying have nothing to do with the decision and are doing it because they are employees not Indians.

This is far from a customer service issue and QR is well aware of the problems it creates as the passengers who are in a position to do what OP has done are necessarily its frequent fliers. This means that QR has taken the decision that it is worth risking the loss of a customer over having the fraud continue.

On a more practical note, have you spoken with your colleague, the beneficiary of your gift? Did he say or do anything in conversation with QR which would suggest to QR that he paid for or bartered in any way for the miles? Has he been the beneficiary of others' miles for any purpose? Has he ever done business with a miles broker?