Comment by odo1242

The bank would be responsible for getting the user their money back under US law, actually - even if it was the user’s fault due to bad security