This is unusual. They aren’t typically coming back. It’s too dangerous for them. I’d probably notify the bank just in case. They won’t catch the person but they’d be aware. You could notify police too. Is this person/people are using the same email address as before?