I would add that Credit Union Central, and I believe the bankers, have endorsed the debit card code of practice that requires the financial institution to reimburse in the event of a fraud, unless the debit card user has contributed to the loss.
There are some time limits on how the decision-making occurs, but the general premise is that the member should not have to suffer for fraud.