The UK's High Street banks are warning that millions of account holders are vulnerable to fraud - online or over the phone.