The guy is obviously a crook, though she did technically authorize the transaction. He needs to be prosecuted so that this will come up on future background checks. However, B of A's reconsideration procedure should've caught this as an obvious error.