MacOS runs on Macs, iOS runs on iPhones and iPads.
It is possible that you downloaded some errant program that anti-virus program is not able to detect. This is why the bank recommends wiping your computer.
Google Chrome is very succeptable to policy hacks.
chrome://policy is a link you can copy into Chrome if you use it to see if a .xyz or similar website has replaced the true policy. If it has, there are scripts that are known to fix that issue:
how to remove weknow.ac virus - Apple Community
TrendMicro has excellent page on removing all redirect extensions and plugins:
https://cleanerone.trendmicro.com/blog/how-to-remove-browser-hijackers-redirect-virus-on-mac/
I do not recommend buying an anyivirus tool.
Malwarebytes and Avast both have a free mode that can cleanly remove all other possible hacks.
if you save your password with any web browser, and have had a hack, it is time to completely change your password not save it with the browser.
If you have a utility such as 1Password for storing passwords, and you have been hacked after installing such a utility all those passwords may be compromised.
If after doing such a cleanup, your bank is still not satisfied, ask them to show you what evidence they have that you are still hacked. If it is some errant email, people spoof emails all the time. Mass email lists are great harvesting points for spoofed emails, and typically any virus on an errant user can copy emails from mass email lists. My recommendation if you get involved in a mass email list, demand that everyone use BCC, and not the To field or CC field to show the email addresses in the clear. This will avoid those email harvesters.
Lastly Mac OS does not require optimizers, and frequently these optimizers get installed because the popups their publishers send as scare tactics see my tip here about removing them if you find they are installed:
Amended comments to MacKeeper tip - Apple Community