Hello nice people,
I've been using NiceHash app for some time 5-6 years ago. (It was a simple app for mining cryptocurrency and you get paid in bitcoin on their wallet, then you could transfer bitcoin to another wallet.) It was working fine until they got hacked (or fooled us) and lost all crypto. Luckily I didn't loose much like some guys did. I decided not to use the service anymore and I'm still receiving stupid e-mail newsletters. I tried to unsubscribe and It asks me for login, I know password, but don't have 2fa anymore. Also I don't have backup 16 words.
Now support told me that this is the only way and I feel ridiculous about taking selfie just to unsubscribe. Am I protected against this somehow? I live in Europe and I think Nicehash is located in neighbourhood.
And of course I never wanted to subscribe...and I don't think I ever verified account with a document.
What are my options other than just filtering that shitty domain as spam?
edit: typo
Email is a perfectly fine second factor for recovery, at least when it was unchanged for so many years
That is your opinion. Personally if I have a password + 2FA configured for an account I don't want anyone without access to those two things getting in. Ideally this would be configurable per-account, this way people who are fine trusting their email can do that and those who aren't can not allow that.
But it is a question of security versus access. Some people would rather lose access to an account than give someone else access.