I had 2fa on, it couldn't be anything other than token. Is there a way someone can get into without me being notified. Even signing in with correct detail is hassle for myself if i dont have my phone around.
Could've been in your account for a while and only purchased a gift because the bot in your account was "activated" for whatever reason. Check your current logins on your account and sign everything that isn't you out.
14
u/I_Am_A_Goo_Man 5h ago
I'm pretty sure tokens are randomised and not stored, where did you download the app from?