My account details don't give access to my account, except for deposits.

 

For access they would need my customer number, which they aren't getting, and my phone to verify any strange account activity.