If you have direct deposit or automatic payment set up, it can happen to you. Good luck chasing your money down.
There are reasons I don’t let anyone suck money out of my accounts. While a direct depositor may reverse a transaction, leaving you in a bind, if anyone without authorization sucked money out of my account, I’d look to the bank to make it good, and let them chase whoever they wanted to.
A lot more efficient than having to chase the wrongdoer yourself.
This is why you have two accounts. One for DD etc and one you sweep funds into.