Eye-opening fraud costs NHS millions