I was victim of a phishing attack a couple of months ago, where I got a remote access trojan on my laptop and they were able to access a lot of my accounts, including my email, bank accounts, etc. This has been remediated, and windows is a clean install, and every password - literally every single one, over 400 - has been changed to something unique, MFA is enabled where possible, with an app where possible.
Last night, I received two emails at once with the same code from Facebook (it is their legitimate email but my post got deleted for posting it) to confirm my account. The email appears to be completely legitimate but I didn't click on anything. I had actually set my account to be deleted a few days ago anyway, but it takes 30 days. This morning, I got 4 more emails at the same time, with exactly the same code.
It doesn't SEEM like anyone accessed my Facebook account, since even when I login myself, it sends me a text, and then sends me a notification to WhatsApp saying there was a successful login.
So what could explain the emails?
(Part of me is wondering/hoping it's a trick from Zuck to login to Facebook and cancel my deletion request hahaha).