An extremely useful video which shows how scammers send fake Paypal invoices and try to convince their (usually elderly) victims to login to their online bank whilst they have remote access. And it usually ends badly for the victim.
Enable two-factor authentication (2FA)
Beware of A New Phone Scam Bypasses Two-Factor Security Codes
In the event your account has been compromised by a scammer, immediately contact your bank and change your password using a suitable strong password. One way is to use a password manager.
Check if your password has been pwned at https://haveibeenpwned.com/Passwords.
Use a FREE secure password manager to generate secure passwords to use online such as one available at https://bitwarden.com/pricing/.
Be more Cyber Aware and Learn more about Cyber Security at https://www.ncsc.gov.uk/cyberaware.