You're describing classic criminal enterprise org management.
It's such a typical pattern that RICO statutes have a specific mechanism ("vicarious liability") to still go after criminal leaders when they engage in this behavior.