When I teach Reg E, I caution against paying provisional credit immediately and I would recommend someone very familiar with the definitions of what an EFT error is review the claim to determine if it is in fact a valid claim at all. Here, the customer would provide the facts, and the claim could be denied immediately as there was no unauthorized EFT. Now there is additional work on the bank's part to recoup the credit, notify the consumer, etc. I hope the bank revisits its procedure.
In some cases the provisional credit disappears and the customer is nowhere to be found.
In a related scam, there were and probably still are scammers getting USAA customers, especially younger ones, to collude with them. They deposit a check, get immediate credit, withdraw the money, the check bounces and EFT fraud is sometimes claimed but in any case the customer was sharing in the proceeds of the check believing there was no harm, no foul, the bank can afford a small loss. A local case had a teen (high schooler whose card was tied to the parents account) deposited a check, had immediate credit based on the parents account and they went to town at the ATM and elsewhere to the point where the parents lost thousands out of their account as it fed the childs. EFT claims were made - and denied.
Also see
https://www.ksat.com/consumer/sa-woman-loses-4000-in-scam-warning-others based on a similar scam as it relates to taking advantage of a bank policy.