Big banks' sales of unreliable card records to collections agents raises questions about who's responsible for making sure payment demands are legitimate — and whether a legal or regulatory backlash is on the way.