This is wrong. Recent CFPB guidance and regulation e guidelines explicitly state that being the victim of a an account takeover is grounds for the transaction to be covered under the definition of an error, if the transaction is POS or ACH.

Liability for wires is different, however, as they are not covered under Reg e.

Anybody with Bank experience should note the criticality of regulatory definitions when trying to provide help.

Edit: OP is in Austraila, Reg E doesn't apply. Oof.