Identity fraud: when the money has disappeared, who pays the price?