You do know it was not actually the bank doing this.
If she wasn’t using HSBC, the scam woulda fell apart. Her fault.