The DWP has been warned against “intrusive” measures which could permit agents to spy on “everybody’s bank accounts”.