Report says licensing process has become a charade, with forged letters, duplicate receipts and ‘ghost applications’