For every merchant hit by fraud there’s a financial institution bearing the brunt of associated costs.