Cyber crime

Facts :There was a fraudulent transaction or account hacking .The customer never made a transaction or authorized a transaction but the bank has levied the amount in monthly credit card bill .On discussion with Bank it is evident that the company was a fraudster and the transaction was illegal .But the Bank is asking customer to pay bill. How can the customer defend himself since he has not authorized the transaction??pls advise