My credit union wants a phone in authorization for any debit or PayPal withdrawal over a certain amount.
They’ve called me to ok some purchases from time to time.
I do routine checks on balances a lot more these days. A co-irker had kids college account drained a while back. Wells Fargo.
He got it resolved, reimbursed and then went to another bank.
I have the same scenario with my credit union as well.
If it looks fishy, they’ll call me to verify.