I have 30 seconds.
Your mandate is not to recoup the money but to try to investigate from a criminal standpoint. Is your challenge trying to avoid a fraud occurring? If you find money, money is usually recouped and sent to the treasury and not to the victims.