I’m personally pretty confused how a private company can effectively fine people?
They have your money and they're poorly regulated. They can just remove it from your account.