Hundreds of lodged visa applications have been processed by fake or unregistered migration agents, according to a watchdog.