Let me guess: the bank itself will get away scot-free, even though they claim to have very robust system against abuse, but it is not their fault that their company helped in this fraud. They are actually a victim who happened to gain millions in commission (which regrettably cannot be used for anything else but for year-end bonuses)