A federal judge allows a lawsuit against Citigroup for failing to protect customers from online fraud and refusing reimbursement, stating the bank misinterpreted federal law regarding fund transfers.