How to Fight Fraudsters without Losing Legitimate Customers