In the US, consumer liability for fraudulent withdrawals from bank accounts is generally limited to $500 by federal law, provided that the consumer detects the fraud and notifies the bank within 60 days. The bank is responsible for the amount in excess of $500. Many banks even have a policy to refund the entire amount fraudulently deducted.