Where two plaintiffs have brought suit against a defendant bank in connection with three wire transfers the plaintiffs sent to a third party in response to an internet scam, the bank’s motion to dismiss should be denied as to claims of negligence, as the bank had a duty to disclose that two of the withdrawals