Good grief this is the second time this has happened, and I'm seriously considering actually emailing this person this time and going "dude what"

?

Where I'll suddenly get a bunch of notifs on my phone of attempts at google verification

which, since I didn't ask for google verification for anything, don't go anywhere

and then finally get a text of "someone used your password for namenamedate@gmail, see: signins"

which sounds bad??

but when I check security settings, it doesn't list any other devices besides my own, and there don't seem to be any security breaches that I can see

so my only guess is that whoever is at that email entered my phone number as their two-step verification number and never realized it??