What to do if you receive a text with a two-factor authentication code from a service you’ve never registered for.