Seems about right then
As for the screw up, you're probably the first person to notice - it's suprising how many people these days never check their statements.
Although from the outside it's tempting to this that it's the company trying it on, the reputational damage that being caught doing something like this (and it's a high likelyhood of being caught) would destroy an insurance company / bank more quickly that just about anything else. Bar except exposure to bad morgage debt...
