Some of the UK’s major banks have been criticised for failing to sign up to a voluntary code which helps victims of authorised push payment fraud.