[danielweber]

For personal banking in America, there are almost assuredly laws that say it's the bank's responsibility. (Note that the rules are different for businesses.)

I'm still trying to find the reference I mentioned yesterday, the gist of which was that personal banking theft is limited by the number of cash mules who can be recruited. Krebs[1] has many articles about money mules that I hope will lead me to it.

EDIT I found it! [2] "Federal Reserve Regulation E guarantees that US consumers are made whole when their bank passwords are stolen."

[1] http://krebsonsecurity.com/2010/01/top-10-ways-to-get-fired-...

[2] Is Everything We Know About Password-Stealing Wrong? http://research.microsoft.com/apps/pubs/default.aspx?id=1618...