R03 would be OK, if you can get it out the door on a next-day basis. Technically, that should stop Amex from using the account number again, but there's a tendency for new faces at larger companies to look back over past activity looking for account numbers related to a problem account, so it can pop up again.
R08 is technically a one-time stop. So it won't have any effect on subsequent attempts.
R29 is a valid return code (2 banking day limit) for business unauthorized transactions.
At the end of your efforts, you may have to resort to contacting Amex directly by phone, or the RDFI involved to threaten the "two-by-four up-side the head" of a rules violation. AmEx clearly cannot legally infer an authorization from the submission of a cashier's check by its customer.
_________________________
John S. Burnett
BankersOnline.com
Fighting for Compliance since 1976
Bankers' Threads User #8