The corporate watchdog says the bank was aware of the scams but failed to take action quickly enough to protect customers.