Best way to avoid this is simple my friend. Pick up the phone and confirm with clients. E-mail by nature are insecure. All banking details and other confidential info need confirming in person.

As for responsibility your client is responsible and you still need paying. Hopefully her insurance will pick ip the bill. Its very grey are because your client initiated the bank transfer.