https://www.chargeback.io/blog/debit-card-chargebacks-guide
Liability is covered under the Electronic Fund Transfer Act
> You have zero liability if you report before any unauthorized charges are made. Reporting within two business days caps your liability at $50. However, if you wait over two business days but less than 60 calendar days after your statement is sent, your maximum liability jumps to $500. Beyond 60 days, you could be liable for all unauthorized charges.
Worldwide.
Most debit cards today have PIN, but that doesn't waive fraud or theft protections. If I purchase something online the purchase of course has my permission. If the goods are faulty or not delivered, then that is fraud and has chargeback protection. Even if you used your PIN, even if you used two factor authentication.