it may not be their fault, they might have been paid with money from a fraudulent account without knowing? just thinking about all the options.