The risk she could face is personal identity theft because someone will be able to be in her account, change her password, and lock her out plus spend her money.
If someone hacks into her phone she can get her personal information stolen and get into personal identity theft problems. As they already have her ban account and the application from the bank logged in they can purchae stuf with her account and do other things like ask for loans on her behalf.
