Police struggle to catch online fraudsters, often operating from overseas, but now a new breed of amateurs are taking matters into their own hands