There are solutions that can stop funds being stolen online, or detect the same - the only issue is that banks approach Internet security from a physical perspective. Analytics should detect suspicious activity, if deployed well - the human factor still remains the weakest link as people can simply come up with a reason to turn it off, or to game it.