HMRC knew of tax fraud risk but failed to act for at least five years – The Times