Banks drag their feet and customers carry the risk of online payments