The UK now has an offence of "failure to prevent fraud", but it seems to me that it doesn't include this case (it includes things like fraud by employees and as

The UK now has an offence of "failure to prevent fraud", but it seems to me that it doesn't include this case (it includes things like fraud by employees and associates who "act on behalf of" the organisation). Amusingly the same legislation also mandates that "A company must not be registered under [the companies act] by a name that, in the opinion of the Secretary of State, consists of or includes computer code.” So no more "drop tables" company names.