Santander and Caixa are perfect examples of how to terribly handle fraudulent payment disputes. I worked in the industry is it’s kinda well known they don’t even follow scheme (Visa/MC) requirements and when you ask them to escalate to scheme they gaslight you.
Knowing this is the hoops you have to jump through in .es means it makes sense they don’t have a robust anti-fraud process outside of .es.