I don&#x27;t think he was using 2FA; if he was, Amazon CS would not have given him the information (or at least should not have, based on their own policies): <a href="https:&#x2F;&#x2F;www.amazon.com&#x2F;gp&#x2F;help&#x2F;customer&#x2F;display.html?nodeId=201596330" rel="nofollow">https:&#x2F;&#x2F;www.amazon.com&#x2F;gp&#x2F;help&#x2F;customer&#x2F;display.html?nodeId=...</a>.