In card-not-present transactions, the merchant is typically liable for any fraud or chargebacks that occur, as they are responsible for verifying the cardholder's identity and the legitimacy of the transaction without the physical card being presented.