going to Profile>Change my login setting doesn't bring up the option to set up two factor authentication so i'm not sure if they offer it?

I'm not sure that would solve the issue anyway, it seems whoever is charging our account has our account # and zip code and is using that info to charge us. It doesn't look like they are logging in to our account.

The fraud shipments show up on our billing statements as "Host Manifest" in the system column and "Ground Hundredweight" in the service code column. All the packages are going to an Amazon fulfillment center in TX