This level of activity is easy to detect if the institution wants to detect it and compile with the law. Chances are the business analyst(s) that did detect it were told to shut up.