'Buy now, pay later' poses risk if left uncontrolled