Bogus self-employed workers using CIS4 cards defraud Exchequer of £2bn a year