[sgbuffett]

1. If you go around impersonating DBS, is DBS responsible for your act?

2. If you impersonating DBS sending out msg to others, is the bank responsible your act?  

3. The money stolen from DBS because you give your userID and password to thief through fake website by the thief, the bank DBS responsible?    

.

Banks are responsible to have a secure process in place so that it reduces the risk on customers.

If physical tokens are used this would not have happened.
If the sms chain is secure it won't be spoofed.
If it can be spoof it should not be used because it js dangerous.