FWIW, the bank is not going to have her arrested. Having been through this at least 6-8 times over 30 years with my business, I can tell you the banks don't give a shit about catching anyone. Their "investigation" is to find out if you (the OP) were complicit in the fraud.