Voluntary code of conduct for credit and debit won’t protect consumers