If it’s a chip card and the vendor doesn’t use the chip, then they are responsible for all fraudulent transactions.

If they do use the chip, then the card issuing bank is responsible for all fraudulent transactions.

This rule was supposed to go into place over a year ago. But most places couldn’t be bothered to update their equipment, so it had to be postponed.

Even now, many places still can’t be bothered. Makes me care about them just that much less.