Fake trades were not detected earlier because of ‘significant weaknesses’ in the bank’s systems and controls, the regulator said.