Yes, the SEC definitely follows up on this, or so I've been told. They're not idiots, and this kind of financial crime is basically super-low-hanging fruit for them (probably because many people make the mistake of assuming they are idiots).
Yes, and they're quite adept at it even if you don't think you're leaving a trace. For example: https://www.sec.gov/news/press-release/2014-55