I think the concerned bank must call the customer whenever any online payment made to enable the customer to know the transaction whether it is really made by them irrespect of the transaction. If the bankers fail to do the cardholder can fight for the fraud transaction took place without his knowledge.
