What to do when receiving unprompted MFA OTP codesReceiving an unprompted one-time passcode (OTP) sent as an email or text should be a cause for concern as it likely means your credentials have been stolen. [...]
Source: What to do when receiving unprompted MFA OTP codes (https://www.bleepingcomputer.com/news/security/what-to-do-when-receiving-unprompted-mfa-otp-codes/)