Credit card companies or their insurers I suppose. They must figure it's worth it to pay out in order to maintain their reputation as a secure payment method.