[JakeTheAndroid]

But, in the same breath, these are the same institutions that have the highest compliance requirements. It seems crazy that when I get these random vendor questionnaires they require such strict password requirements, yet financial institutions aren't included in adhering to these best practices.

[ben509]

They've got lots of compliance requirements, but I don't think they're all that strict.

As a consumer, do shop around for someone who has good security practices, and point non-tech people towards them.

Theoretically, in any fraud you can get all your money back, but if the bank decides it was your fault, you have to take them to court.