I guess that if you get 2FA codes for an old email address and a telco provider you both haven't used in 10 years, within 5 minutes from each other, something is up... ugh.