If you lose money due to fraud, your bank may just tell you ‘Tough,’ investigation finds