Also when the payment is made from a hacked account? Most exchanges ask for KYC on top of bank transfers, just so they know you really own the bank account you're using.
In the UK, yes. Once it's gone it's gone. But it has to be a certain type of transfer. There are countless cases of men in the middle and phishing where the banks told people it was their fault and that was that.