Identity fraud: When the money has disappeared, who pays the price?