I wonder is not it bank's responsibility to refund the money that were stolen from customer's account? And don't they use SMS messages to confirm outgoing payme

I wonder is not it bank's responsibility to refund the money that were stolen from customer's account? And don't they use SMS messages to confirm outgoing payments? But this case shows also that Internet banking UI are too complicated for some people and they don't realise what they are doing when following scammers' instructions.