Re: Russian money
Banks are subject to mandatory penetration tests (proper ones, not a kid with Nmap and Nessus.) There's even an official standard for organisations allowed to provide them: http://www.crest-approved.org/uk/who-we-work-with/cbest/index.html