She does have facial recognition but was suspicious and purposely kept the camera closed. They repeatedly told her the bank will never ask for usernames or passwords so she does not have to worry. In order for them to close the fraud case she only need to scan the QR code....
Exactly the same happened to my GF. They scammed her out of a lot of money. She never provided any usernames or passwords and I don't understand how they got into the mobile app.
The worst is they had to create new beneficiary and do an immediate payment. She never received any OTP'S.
I see...