PayPal randomly does this, and if someone could log onto my account, as the same identity theft person could find out my telephone number as well, then use the code to verify it is me
If they really want to ensure only the actual paypal client is accessing the account, send an email saying my paypal account has been used, and if I did not use it, I will get back pronto.
Banks do this all the time, and this does not prevent authorized people unable to access their website if they use a public computer or do not have a cell phone
P.S. I would not recommending contacting customer service as this appears to be policy they have no authority to override for individuals
Quick security check
We just need some additional info to confirm it's you.
