Broker mandates vulnerability checks as FCA warns of weak identification