Federal law requires banks to reimburse customers for unauthorized electronic transfers, but they often refuse, stranding victims.