Where are they claiming it's anything but users falling for deceptive messages? The banks won't do anything because the transaction isn't fraudulent.
Duped users are victims of fraud.
When someone opens an account in one's name, that's fraud on the bank, and the bank needs to pay for it until squeezing it from the scammer. When someone convinces one to send them money under false pretenses, that's on one and one needs to pay for it until squeezing it from the scammer.