Fraudsters stole £1.18m from contactless users in 2018, with the average theft size also increasing