The bank is NEVER the victim, it’s the merchant. As a merchant who sells performance automotive tuners online, I can tell you that it is I who loses the money on these fraudulent transactions (if they get by me and the product gets shipped).
The bank loses nothing whatsoever other than time involved with having processed and then reversed the charges.
“if they get by me and the product gets shipped”
Wouldn’t the shipping address be the location of the thief?