A bank manager seemly carried out a systematic fleecing of their client. Lot of issues raised by this however it would seem that you should consider making sure you have complete access to your accounts and that you don’t allow others to act as your proxy.
Yes, pretty scary. If accurate the Banks internal controls must have failed as well, getting a debit card means signature verification, job rotation and I guess the manager must have had others collusion.