There is protection under Regulation E, assuming that that card has Reg E protection.

Here are not valid

What is a PIN? League

Payments express / Have express pending