Her bank should file a fraud investigation immediately.
My tiny Credit Union has caught all sorts of attempts on my account and fully refunded me for a couple stolen transactions.
She needs to file a fraud report and process whatever paperwork is involved in that.
It’s not that hard and her bank should walk her through that process if they are a good bank.
From what I am reading I am beginning to think Credit Unions do business different to banks. My Credit Union can be a pain in the butt sometimes, but we have never had an issue using our Debit cards. It is not required, but they ask us to notify them if we are going out of state for vacation. We notify them when we are out of country or they will lock the card immediately for overseas purchases, They have locked my card a number of times flagging it for suspicious activity and the one time I was ripped off, they refunded me instantly. Same with my daughter when she was in college. I get irritated with them sometimes, but they are looking pretty good compared to what I am reading. I have not owned a credit card in over twenty years.
My credit union wants a phone in authorization for any debit or PayPal withdrawal over a certain amount.
They’ve called me to ok some purchases from time to time.
I do routine checks on balances a lot more these days. A co-irker had kids college account drained a while back. Wells Fargo.
He got it resolved, reimbursed and then went to another bank.