I received a text from turbotax with a code that i did not request. Has my account been hacked?

[rjs]

No, your account has not been hacked. What probably happened is that someone with a user ID similar to yours made a mistake typing their user ID, and entered yours instead. The requirement for the security code prevents them from signing in to your account, since you got the code and they didn't. The code is sent before they can actually sign in. You can just ignore the code.

The other possibility is that someone intentionally tried to sign in to your account. But the security code requirement still stopped them from actually signing in.

[Coyretta]

I didnt ask for a code via text 

[Anonymous]

I have received unrequested codes from turbotax, quickbooks and mint every day for months. It is unrelenting. Turbo tax says it is not a problem, someone just entering wrong numbers. Not trusting it this year.

[CatinaT1]

I would just ignore the texts. Do not share the code with anyone. Hackers are really ramping up. I get multiple texts from Apple like this. Assume the hackers have your user name and password, but because you have 2 factor authentication, they can't get into your account. If you want to change your password you could do that, but make sure you keep 2 factor authentication on.

[jbowler]

These messages are third party attacks that use an Intuit account set up to use SMS (cellphone) verification.

The attacker simply attempts to log in to the Intuit (typically TurboTax this month) account and requests a verification code to be sent to the telephone number.  The attacker **does not need to know the telephone number**; just enough of the account login to get to the "2FA" (two factor authentication) stage.

The verification code is 6 digits long; one in a million to get it right!  So, no; your ex can't get it right.  However this is the "birthday problem":

An attacker (think "state actor") with a whole lot of Intuit account logins, just your user name, can reliably log in to one of them just by guessing the six digit number.  It just takes a few thousand attempts.

It's tax season, so now is the time to do it.  Roll out your carefully acquired list of millions of Intuit login IDs and simply get logging in.  It's not, "Sooner or later you will get one."  It's like one per second.

The messages we are receiving are **not** the ones we, individually, need to worry about; we will never know if our own Intuit account will be hacked.  We are simply seeing the attempts to hack some other account because we acquired their telephone number after they dropped it!

The problem is not the message; the messenger was prekilled.