It started with a single text message on a quiet Friday afternoon: “Urgent—bank alert: unusual transfer. Tap to review.” The…