@MojangSupport I am currently in a support email thread where the support person had be change my microsoft password to one provided by them and is now asking for a login verification code. This smells like phishing-101. Can you verify that this is the Mojang proper procedure?