I work with some some crime underwriters and some of the scans are very sophisticated.
Fire example having into a solicitors email system and watching house conveyances go through the process and at an opportune time get the buyer to transfer the deposit to a scam account.
All very convincing as they've been watching the whole transaction and a) pick the right moment and b) use the right language-none of this uncle in Nigeria nonsense.
Personally I don't think the banks should be liable but the institutions who have so poor security their emails can be compromised in this way.