> What should they actually have done differently?

Credit card processor revenue reports over prior months may have shown startingly small revenue. Match that with bank statements.