These things depend on jurisdiction and your particular contract, but in the western world generally some things apply:
* transactions are printed physically (iirc SEPA mandates this) (account balances can be recovered, like bitcoin)
* accounts are insured up to some ammount (will be covered by insurer provided bank cannot cover)
* bank will cancel/refund transactions that happen x hours prior to proper notification of account compromise (details vary)
