From the article, it suggests that the thieves “shoulder surf” the victims until they see them type in their device pin, then after pickpocketing either use that same pin for the app, or search through notes for sensitive passwords and the like.
> I should congratulate the thieves on accessing his Barclays account though. I was a customer of Barclays for many years but simply got fed up of constant technical errors preventing me from accessing my own funds.
This is certainly one way to keep your money safe! Bravo, Barclays