LOL! It was an ACH.
Ok that makes more sense, I do not think you can fraud a wire transfer because its a push not a pull, but ACH you can. HOWEVER there is a simple procedure: They should run the ACH, and keep the money in suspense for a week.
The signatory of a personal (but not business) bank account can dispute an ACH transaction as fraudulent up to 60 days from the statement in which the fraudulent transaction was reported. Keeping funds a week would do little good against "friendly fraud".