Merchants may be held liable for certain types of fraud, especially if negligence or inadequate security measures on their part contributed to the incident. Implementing robust security measures can help mitigate liability.