You have it backwards; prior to the liability shift, fraud costs hit the issuing bank. Now it’s on the weakest link in the chain, but if they’re both up to the EMV standard, liability still rests with the issuer. https://en.wikipedia.org/wiki/EMV#Implementation