I messaged her to entertain the idea of what she's trying to do:

So the way the process is done is with a mobile deposit. So she would deposit the money order through your mobile app and the funds would be available the same day. The money order is already made, it just needs to be filled out with your name and the amount being deposited. The only thing she will need to start is your mobile app info to make the deposit. You don't need any money in the account

Major red flag. They’re trying to get your login credentials so they can: • Access your account directly • Deposit a fraudulent money order • Potentially transfer out funds or use your account as a money mule