If your bank account is protected by SMS-based 2FA, for instance, they'll receive the code on their own device, authenticate themselves, and break into your account.