What information does a scammer need to access my bank account?

As a concerned individual interested in digital security, I'm curious to know what specific pieces of information a scammer would require to gain unauthorized access to my bank account. Are they primarily looking for my login credentials, such as my username and password? Or is it more nuanced, involving personal details like my full name, date of birth, and social security number? Furthermore, are there any additional layers of security that I should be aware of, such as account recovery questions or security tokens, that could also be targeted by scammers? I'd like to ensure that I'm taking all necessary precautions to safeguard my financial information.