If we cannot promptly collect all of the remittance for a security, we may in our discretion cancel the security unless it has been legally transferred for value to a third person who had no knowledge of the improper debit entry at the time of the transfer.
31 C.F.R. § 370.45