The timeframe is much longer - 60 days AFAIK. So essentially you verify every statement, or verify the online transactions every month and a half.
Even with the smaller attack surface of a banking system based on only "pushing" money, surely other countries must have analogous timeframes for reporting unauthorized transactions (eg from an authorized login).
Even with the smaller attack surface of a banking system based on only "pushing" money, surely other countries must have analogous timeframes for reporting unauthorized transactions (eg from an authorized login).