If she was happily tapping her finger to "set up the app" they were having her install they could have easily increased the limits.
By the time the banks fraud sensors trigger its all done and dusted and the moneys gone.
You say that like the government has any sympathy for the people of South Africa. Why would they care about people losing access to life changing medicine if they don't care about public hospitals in disarray, people getting raped and murdered, children dying of malnutrition etc.
They only care...
My recommendations are usually.
Never action cold calls/emails/WA/Telegrams requests.
Say OK thank you for alerting me I'll go and sort it out immediately, and then phone the bank via the number on their web site and find out if its real. This breaks the majority of the scams and they will try...
Take care with that as well. More than a few takealot phones have turned out to be contract phones. Make sure its a reputable store and not some funny 3rd party.
The banking app doesn't know the difference if it simulates the touch screen as an example:
https://play.google.com/store/search?q=touch+simulator&c=apps&hl=en
She installed an app from the link and then most likely gave it permission to control other apps like the banking app she just unlocked with her finger.
Essentially what happened here is the equivalent of meeting someone on the street who makes you an offer of highly discounted flights walking them into the bank, asking the teller to put all your money on the counter and then when they grab it and run blaming the bank.
Should the bank have more...