I know a lot of recent cases in Portugal where owners of phished accounts get the hit because the banks say that if they don't protect themselves from banking trojans and such, it's the clients responsability and not the bank... So, even if it's a EU directive it doesn't work like that in Portugal.

But yeah, Portugal is the kind of country where you should pay money transfers between euro accounts if you choose to go to the bank, being the transfers only free if the customers use their homebanking services.  I guess the bankers here are the worst kind.