I don't have much new to say about the risks of debit card fraud, other than that I've been a recent victim, and it sucks more than credit card fraud because the bank won't give you your grocery money back for at least five days, if ever. It's just as easy to get hit as with a credit card because the scammer only needs the check card number to spend all your money. Even if your bank will refund the full amount—and they're not required to—you are still liable for overdraft charges and other problems during the interim. In my case, I'm certain that you don't have to have used your check card in a risky way (online shopping, sketchy storefronts, scary generic ATMs) or accidentally drop your PIN into conversation in mixed company to result in your account being charged $500 from a Point Of Sale terminal in another state.
US PIRG warns against the unspoken, added risks pushed onto customers because banks make more money from check cards than from real, PIN-required ATM cards, and advocates for stronger state and federal laws limiting customer risk and liability.
This is exactly why I told my bank I didn't want a debit card, I wanted a regular old ATM card that only worked at ATMs. They thought I was nuts, but they complied.