Financial fraud: who should be held responsible?