Step 1: Go buy personal information about people on the dark web
Step 2: Setup bank accounts in their names at neo-banks with weak KYC/AML policies
Step 3: Have money sent to these accounts where the actual named owner has no idea it exists and you hold a debit card to it.
The only recourse you have at that point is to shut down the accounts and hope they haven't drained it completely. And that's if everyone is willing to play ball, there are countless bureaucrats in this process that can slow or stop it because it's extra work and they feel like their job isn't on the line if they ignore the request.