3 ms·

Give her access to an empty account, then log everything she does. Block her and report as necessary.