Americans have lost hundreds of millions of dollars to fraud tied to payment network’s shoddy safeguards