Not different from harmful content. 16 billions fraud establish a pattern which makes a company liable. I would start by paying back the amount with on top a considerable fine (the kind of fine painful enough to remind you not to do it again), then a warning with penal prosecution next time.