Weak controls and useless solutions

Someone tried making online purchase using my card , only reason why the purchase didnt go through is because of insufficient funds. Tell me why the solution is stopping a card and paying replacement fee when its probably their stuff who tried to do this? Does this mean everytime my details is compromised i will have block and pay replacement fee for a new card? Its weak internal controls that we must pay for evertime