My (limited) understanding is that this is the financial companies problem in every case except for when your payment information is stolen. In which case it becomes a hot potato of whoever is out the money is the one who is liable.