“Banks are stepping up their customer protections and will be accountable for those measures, but they cannot take on full liability for scam losses that are beyond their control and may, for example, start with a fake ad or chat on social media, or a fake search engine result,” he said.