Banks must improve anti-fraud controls to fight APP scams.