In the UK at least this is not true. The bank have to demonstrate you did not take reasonable care to protect your PIN (e.g you left it written down in your wallet).

See some of the following case studies by the FOS that support the fact that the customer is not always liable even if the PIN is used:

http://www.financial-ombudsman.org.uk/publications/ombudsman...