I wonder if the banks could save money on fraud prevention by just buying all their stolen credentials on the open market and cancelling them all. I know that

I wonder if the banks could save money on fraud prevention by just buying all their stolen credentials on the open market and cancelling them all. I know that would mess up with incentives to steal those credentials, but it still might be worth it.