Worst Bank in South Africa

So this morning someone hacked my account that's supposed to be face recognition and all that security and withdraw R3000 out of my everyday account this happen with a opt that I received and log on to see what's going on now I'm wondering how the hell do someone log onto you account without your face and 2 passwords ? And get it right to withdraw money with a opt that gets send to my self phone number to top it all off I got told I'll have feedback on the 26th June if they can refund the money this is by far the worsted experience from tymebank and now I'm starting to dought there security system lucky I got other money transfered out of my account before that was also gone even my device has been delinked after I did that transfer so now this is bothering me because my account got hacked without my account being delinked in the first place normally if I log in from a different device it delinked my current device what didn't happen in the first place only once I saw what's going on and saving the last bit that's left my device was delinked a total of R3300 gone.