In the last week, I have gotten an alarming number of text messages from my banks 2FA system sending me verification codes. I believe this indicates my password has been compromised. I’ve had my account for 9 years and nothing like this has ever happened before. I recently added my significant other to the account as a joint holder.
I haven’t contacted my bank yet (although I plan to) but honestly, I don’t imagine they will do anything except for advising me to change my password. And I will. But here’s why I’m reluctant to do that.
In the 2 years that we’ve been together, my SO has had frequent hacks on her various accounts and is constantly getting fraudulent charges on her accounts. A month ago, her Amazon Prime account was being hacked and used to buy digital content, and every time she changed her password the account was being hacked again within a day or two.
Seeing all of this, I believe there might be a keylogger or some other malware on her phone. I’ve mentioned this possibility, but according to her, "iPhones don’t get viruses."
Other than contacting the bank and letting them know what I have seen, and changing the password to the account, what can I do to put the lid on this before it boils over? If it was me, I would go through the phone and delete any app that looked questionable, but since it’s not my phone and my partner isn’t willing to acknowledge the problem, I can’t do that. Maybe I’m jumping to conclusions as well. Any suggestions for an anti-malware scan, or other ways to lock down the security?