Of course it can.
Which is why the banks usually (not always) refund without the customer having to go as far as the Ombudsman or worse.
One should never make a false claim. That is fraud, and is criminal.
That is just false.
It is less easy for a thief to get hold of the PIN than it is for them to forge a signature, but there are ways they can (and do) use.