As I understand it, UK banks (where this article is written) will soon be required[1] to reimburse victims of Authorised Push Payment fraud (some banks are signed up for a voluntary code at the moment) outside of "gross negligence" by the customer, so they can't just allow customers to waive liability. Making transfers now involves multi step questionnaires with big scary warnings about scams at every stage.

[1]: https://www.psr.org.uk/publications/policy-statements/ps233-...