[rmilk]

Same thing happened when EMV was first rolled out. There was replay attack fraud, but the cardholder was blamed for it. But once you get enough complaints, it forces insurance and gov oversight into action as you describe. Article from Brian Krebs on EMV implementation issues back in 2014 timeframe for example: https://krebsonsecurity.com/2012/09/researchers-chip-and-pin...