Champers question ("Did you give your password to someone?") is highly relevant to your original question, which was:
"My phone was stolen and bank app was compromised, had money transferred to some Thai guy. Police gave me a report to give to my bank to investigate further, I guess to get the full name and a/c number. So, they'll have all the details of the guy who received the stolen money. What are the chances of having this returned? " You used a dumbass password, so that significantly reduces your chances ... to about zero.