this will be why I received an unsolicited paypal TFA text with a security code yest. I changed the password immed but wondered what was going on.
“Trust us! Your data is safe with us!”.
When in doubt, doubt everything.
If I ever get something similar to the above, I never click on any. First thing, after doubting, is to check the senders email address. Many times it is obviously not reputable.
Then I go to the website/service/app in question to see if there is an issue.