The charity should have had the systems in place to catch the fraud well before 100k was spent.
One would think so.