2FA recovery pending — unauthorized 2FA on my account (Case #01539816) - Help

I've always signed into Vercel with Google, and never set up an authenticator app or any 2FA on this account. A few days ago it suddenly started prompting for a 6-digit 2FA code I never configured.

I completed the self-serve 2FA recovery flow (verified via email sign-in, submitted the "Help us verify the account" form with team scope, GitHub repo, and deployment history), but haven't heard back from a human agent yet — only the automated case-opened confirmation.

Support case: #01539816 Team scope: genie13 GitHub repo: hannival23/G-BANK Production URL: genie-classbank.vercel.app (auto-deploys on every push to main)

This project runs a live classroom app that students use daily, so being locked out is a real problem. Could someone from the team take a look at this case? Thank you.

Hi there! I'm just a bot here to share some info that might help you before a human arrives.

If your account is eligible, you can use our new self-service recovery flow:

Go to vercel.com/login
Choose to sign in using the email + one-time password (OTP) option.
Select Use another sign-in method
Verify your identity using the GitHub, GitLab, or Bitbucket account previously linked to your Vercel account
Follow the remaining prompts to complete the recovery process

If you've ever set up a passkey, possibly on another device, you can use that to get back into your account and update 2FA settings yourself. You can also use recovery codes if you've stored those in a safe place that you can still access.

If you are unable to access your account using the steps above, you can open a support case using the Start 2FA recovery option on the Two-Factor Authentication login screen. Please do not publicly post account details, like your email address, that could help an attacker gain access to your account in the future. There's no need to open an additional case if you already have one open.

Thanks for your patience while the team works to resolve all cases as quickly as possible while keeping everyone’s accounts safe and secure. A human should be here soon to help.