So long story short: adapt that rule so the beneficiary of the fraudulent service pays the bill. There, I fixed it.