That is not quite correct. But the rules are different.
I had direct experience with a Debit card fraud in which the perpetrators emptied my bank account over a weekend. I detected the fraud on Monday and called my bank (and the police).
I was told there if such losses were reported within three days of occurrence that the bank was required by law to make good on the losses. They did.
The card was apparently run through a skimmer at a retail store by a newly hired clerk. The skimmer copied the account number and PIN code from the mag stripe on the card.
The criminals took hundreds of these scans, copied them to bank card stock and ran them through ATMs all over a nearby city the next weekend. There was in interesting photo of a gang member swiping my card at an ATM about 80 miles away.
I got an order confirmation request from REI for several thousand dollars worth of camping gear to be shipped to a bogus address in Washington State. I declined that order of course. No harm done there.
There were prosecutions a year later, but I never learned any specifics about the outcomes.
I got a new card. I got a new account number. I got my money back.
So if you don’t catch it within three days too bad?
Are you starting to see why I now only use credit cards that I pay off weekly?
Same thing as a debit card only no three-day-too-bad thingy.