A £39m withdrawal as cashpoint fraud soars