Make sure 2factor is enabled for both logging into internet banking, and for sending money/making online payments over x amount of dollars e.g. for substantial amounts
Make sure to treat any email sent to you purporting to be from a bank as a scam. Always call the bank on their number listed on their official website, don't call any numbers provided in emails
Make sure to treat any phone call purporting to be a bank as suspicious. Ask for the person's name, department, tell them you will call back on the official bank number listed on their website and then ask for to speak to that person