A frozen phone screen, a fake customer-care call, a screen-sharing request or even a duplicate SIM can give cybercriminals a route into your bank account.