The bank makes money on chargebacks, so they have an incentive to allow a certain level of scams.