You were likely phished, have a banking trojan on your system or at some point used your banking login on your phone. I've dealt with people in your situation.

You were likely phished, have a banking trojan on your system or at some point used your banking login on your phone. I've dealt with people in your situation. In one instance the victim may have used their bank card in one of those payment apps which were then compromised. For financially gained low sophistication crooks,they just want as much from your checking account as they can so getting your cc#,payment app login and similar access is good enough. No need to actually login to your bank. That said,even with 2FA turned on,if you can reset it via email then they probably gained access to your email (again,phish) saw emails from your bank,reset 2FA ,delete email trail and login. If you dont have 2FA on your email, see if you've gotten push notifications from your bank elsewhere. If you're on windows my money is on banking trojan but email compromise is also likely. If not, I'e check your phone.