Technology experts say thieves then contact the victim's bank and when they want to reset the password on that account, a verification code is sent to the phone number on the mobile device in the scammer's hands. That allows thieves to get in and empty out, or at least try to empty out, the account.