From the FFIEC ODP Guidance:
Institutions providing overdraft protection programs should adopt written policies and procedures adequate to address the credit, operational, and other risks associated with these types of programs. Prudent risk management practices include the establishment of express account eligibility standards and well-defined and properly documented dollar limit decision criteria. Institutions also should monitor these accounts on an ongoing basis and be able to identify consumers who may represent an undue credit risk to the institution. Overdraft protection programs should be administered and adjusted, as needed, to ensure that credit risk remains in line with expectations. This may include, where appropriate, disqualification of a consumer from future overdraft protection.
If you have any customer, employee or not, that abuses the program - it should be terminated based on established bank policies.
The opinions expressed here should not be construed to be those of my employer: PPDocs.com