4. In order to unlock our profile, one of the "security" protocols is to send their support email the following from two other accounts with our domain: "“I confirm that the security of this account is maintained and that [my email address] is not compromised, You can proceed further with disabling the MFA.” 5. I am the admin of our email addresses. Not feeling great about this company having access to our bank account info at the moment...