I was able to transfer 10K few days back with just the pin code approval. That's when this plot came to mind. It's possible that if something like that happened then you wouldn't notice it. For example if someone just transferred 5000 you probably won't notice it right away.

The example here is extreme you just have to acknowledge the moral of the story.