Not to derail the subject but this is one of the main reasons people get their bank accounts compromised, using debit online (and using debit generally). Once the account is compromised, so is all your money. The bank may open an investigation to recover your funds but there's little incentive...