The case highlights potential weaknesses in fraud detection systems – and neither bank has offered to reimburse.