I know this wasn’t done, but when they identified the fraudulent accounts, they should have put a trace on them to identify who was cashing them, and arrest them for fraud.
This sounds a lot like the IRS situation. No arrests, but promises that the situation will be changed so that it doesn’t happen again...
You’re right on both counts!