I believe the merchant processing company would take the loss. They usually pass down the loss to the credit card processor to protect themselves. I'll try to do some research on google.com and figure out who would be left mainly responsible for the loss.