I doubt there will be criminal prosecution for this 2 year "thing" if client corrects it voluntarily and quickly.
But I am not a lawyer.
