E-commerce still vulnerable to VAT and customs duty evasion