What first looked like a Commonwealth Bank problem is shaping up as a broader fraud risk tied to broker and referrer channels across the majors.