Well investing the client deposits is pretty much exactly the situation I described. Probably could be seen as less directly scammy or intentional than selling their assets and investing it in <pick-a-product>, but certainly still a pretty standard client money breach