Indeed. Under the Banking Act the bank is the victim, and the only way they can pass the buck to you is if they can prove you've somehow been negligent. The onus is on them to prove your guilt, not you to prove your innocence, so being refunded is effectively automatic.
Happened to me once and the source of the compromise was indeed traced to a petrol station being run by ba Tamil criminal gang.
And if we're being really pedantic, you can't 'steal' an identity. With the exception of electricity which has its own little caveat in the Theft Act, you can not steal something that is not tangible, which does not have physical form.