I do not think there is a law against it, neither do I think it is possible to prove that they are doing it on a widespread basis to bring any merits to a claim like that. It also depends on the country you're in and its jurisdiction.
Nope. It's called fraud control. CCB, and I am sure other companies, actually have different levels of scrubbers they can put you through depending on your company and past history.