Yes, that’s basicially what yahoo takes me through. It sometimes shows my real email address to send their verification code to but I never get their email.
Sometimes, it wants to send the verification code to some unknown email. Of course, I click off that immediately.
Even if I’ve been hacked, why would yahoo sometimes want to send the code to the real email address one time and to the unknown email address the next time?