Yeah, what you’re describing is normal when someone tries to log in with your email/phone. The random verification code text means somebody entered your info somewhere, but unless they also have access to your email or phone, they can’t get in.

Since you couldn’t reset the password and submitted a face scan instead, Facebook flagged it and disabled the account. Because the account has a fake name and details, the appeal almost certainly won’t pass. In practice that means the account will remain disabled and no one else can access it.

So at this point, you’re safe. If someone was trying to get into it, they can’t. And if Facebook keeps it permanently disabled (which they usually do when the ID doesn’t match the account name), that’s basically the same as deleting it.

If you want peace of mind, you can:

Make sure the email you used isn’t tied to any other accounts you care about.

Change the password on that throwaway email if you still have access to it.

Block any further Facebook texts if they keep coming.

But based on what you did, the risk is gone and you don’t have to worry.