What is an online banking customer's liability if someone gains access to their account via Internet?

Let me re-phrase my question. Does the Reg. E liability section concerning $50, $500, etc. and timing of notification apply to online banking the same as it does to debit card or ATM transactions?

The "stepped" liability provisions in 205.6 apply when an access device is used. An access device can include a token, a code, etc., in addition to a card. So if a financial institution issues a code for logging in to its internet banking site, that code could be considered an access device.