Prosecutions need to happen for this kind of thing. They really do. Start with the frontline and work your way up the chain, ordering a frontline employee to commit a crime with a policy document is a crime for all who wrote and approved the document.
If a google customer engaged in fraud of a similar against google there's no doubt google have the option of involving the police and getting a prosecution. A corporation is people who are all responsible for their actions.