Actually, I do have 2FA enabled on my account. But I don&#x27;t think I had it enabled at the time for the very first attack.<p>Interestingly, last night I did get an SMS: &quot;Message from Amazon Customer Service: xxxxx is your Amazon security code&quot; even though my 2FA is not an SMS (it&#x27;s using authenticator).<p>I don&#x27;t have access to the recording, so I have no idea what actually happened. But based on the email (&quot;here&#x27;s the details&quot; on your order) I&#x27;m almost certain they were successful. Probably just told them that they lost the phone, or something. At this point, they&#x27;ve now been able to get almost everything possible about me.<p>Also interestingly, not once did Amazon recommend that I use 2FA to avoid social engineering. I was told by two different support reps to change my password though.