Merchants bear 49.9% of debit fraud burden vs. 28.3% for banks—a 2026 shift in payment risk & liability.