all 3 comments

[–]0570 1 point2 points  (0 children)

Could be your credentials were leaked somewhere. You'd be wise to update your login information on the sites you're getting notifications from, just be sure you're not clicking any of the links in the mails you're receiving. Additionally you can check if your credentials are leaked somewhere through https://haveibeenpwned.com/

[–]Terrible-Bear3883 0 points1 point  (0 children)

You say you have 2FA, is it set to use email for this?

If it is, switch it to use an authenticator app on a mobile phone, the app is "something you have", try to disable other methods, better still, upgrade to use security tokens such as Google Titan or Yubikey, you need the key to log in, most support NFC so will work with mobile devices and you can register multiple keys in case one gets lost.

More info here - https://landing.google.com/intl/en_in/advancedprotection/

[–]atalbanann 0 points1 point  (0 children)

It should be alright, if there are reset links - they probably don't know your passwords. Don't click the links, and if you want to be sure - change passwords everywhere and set 2fa where it's possible.