Banks are getting better at stopping credit card fraud, but they’ve got a long way to go