Investigating direct payments fraud