A lookalike banking app can steal your active session token and drain your account without your password. Learn how to stop it by enabling biometric re-authentication and checking your active sessions.