The starting point for banks is if the customer has authorised the payment its not their liability but can change that if its proven that they weren't guilty of gross misconduct by not doing any checks prior to make the payment but that can take months to resolve.
If the customer hasn't authorised the payment they will refund.