Yes, that is correct - you'll have to read the small print of the agreement that you have with a particular bank/credit card company to see exactly what the situation regarding fraud is. It usually comes under the section headed "Liability for loss ....".
Followed by things like "You must tell us immediately ..... if your card is being used by another person without your permission", usually followed by the clause "You are responsible for for all charges ...... up to the time you told us about the loss".
It is almost impossible to prove what has happened in an online situation, and the onus is on you, the cardholder, to prove that you were not at fault. It rather depends on what 'loss' means in an online environment.
In the past, I only managed to convince a CC company that a large transaction passed through my CC was a fraud by proving that I wasn't even in the country at the time when the transaction took place Up to that point they had been pestering me to make a full or partial payment.
Bit difficult to produce that sort of evidence in an online environment. From a practical point of view, the best solution (if you are buying things like books), is to get a CC with a very low credit rating, so that even if the worst happens, you are not talking about a lot of $$