Regulator tells banks to stop victim-blaming