Our institution recently received a letter from someone who is currently incarcerated alledging that we cashed a check for them while they were in jail. The check was written to a noncustomer (the payer is a customer) and it appears that we wrote down their drivers license number, expiration information and social security # on the endorsement. The payee does say that the drivers license information is from her drivers license but that there is no way she could have came to the bank to cash it as she was in federal custody. Of course this is from about a year ago so we don't have any recording of the incident on file. What are our responsibilities here?