Britain's biggest banks now forcing online customers to tick a box that could later deny them a refund if they are defrauded