The British government has known for months that criminals were using stolen identities to make fraudulent online tax credit claims worth millions of pounds, but ministers have not done anything to stop swindlers.