Banks claw back fraudulent Covid loans – but they must get it right