“The upshot of all this is that many financial institutions will claim they’re not required to reimburse the customer for financial losses related to these voice phishing schemes.”
A fake text about a suspicious transfer, then a call from a spoofed bank number asking you to read back a passcode. The passcode resets your password and the money leaves by Zelle. Banks then call it an authorized payment. Regulation E says they have to refund it. They are betting you don’t know that.