EU fintechs face new AML duties as APP scams surge