Any terms of service signed for that would prevent a customer from suing over additional fraudulent accounts would be almost certainly unconscionable.