1: First of all, it depends on whether your card has a password. If so, according to international practice, banks do not need to bear any risks.

2. If you don't have a password, you can spend it by signing it. It is recommended that you report the loss of the card within 48 hours of the incident and call the police immediately.

The follow-up bank will cooperate with the police investigation and will refund the money to you. As for the loss, banks and businesses will bear it, and the proportion depends on the situation.

It is impossible to sue the merchants directly. Only the way of bank complaint can be taken, which is coordinated by the acquiring bank (the bank with POS machine), the issuing bank and the merchants.