Scam alert watchdog says fake scottish law firms are hoovering up credit card details