Customers are tricked into authorising a payment to an account controlled by a criminal.