There is no black and white answer to your question. On the one hand there is Reg E which simply requires that the customer enter a claim and the bank investigate. Under Reg E you are forbidden from requiring a police report, although you may ask for one. Also you cannot deny a transaction simply because a PIN was used.
On the flip side, this is not a court of law and you are not required to have "indisputatable proof" Reg E only requires that you investigate. You are permitted to use patterns of account history and usage in making your determination. For example, if a customer always makes cash withdrawals at an ATM at Main St. & Broadway around the same time every week, and then mysteriously disputes a month's worth, you may point to account history.
Also don't forget VISA/MC Zero Liability coverage may apply to non-PIN based purchases, depending on the circumstances.
Some questions to ask
#1. Did you loan your card to someone who exceeded your authority to use the card?
#2. If the card was loaned, did you get it back?
#3. If the card was in fact stolen, is there anyone else in the house who may have had access to it who also would have known the PIN?
If someone abused their privledge to use the card, then you may deny the claim. If she got the card back, and the same individual later stole it, she has a valid claim under Reg E, but make sure she knows the bank will file a police report against the individual. If she sticks to her story that no one had access to the card, no one knew the PIN, and she has no idea what happenned, you're back to working off the account history and trying to get video.
_________________________
Sola Gratia, Sola Fides, Sola Scriptura, Solus Christus, Soli Deo Gloria!
www.tcaregs.com