A Which? investigation indicates fraudulent content was left online even after it had been reported.