Mishcon’s £1m ID fraud bill sounds alarm bells