While there are steps you can take against traditional bank fraud, stopping a Tesco-style attack is much harder