Merchants are already de facto liable for fraudulent charges.