After a business / fun trip to New York City, my bank called me with unnerving news: a transfer of $2,000 had been initiated to a stranger. My password & contact email had been changed too. The bank intercepted the transfer & cancelled it.
Two days later, $3,000 was transferred directly to another bank account.