<Snip>
Everything you said matches with what I just saw as well. When you activate the 2FA, Stake sends you an email where you need to confirm the activation. That's not the case when you want to disable it. I see no reason why they wouldn't require email verifications for both actions, but it doesn't matter now.
to confirm, they have updated it a day after my money was stolen, they now send an email when 2fa is deactivated.
They don't do that, no. Only when you want to activate it will they send you an email.
Also thats not even remotely close to what I said lol. I said there was no notification when 2fa is removed, no secondary email, no alert from the company nothing> I never said it can be removed without inputting a code.
From the way you explained it in your scam accusation thread, I got the impression that you meant to say that 2FA can be deactivated without entering the code. We misunderstood each other.
I quote:
No they sent no alerts and require no secondary auth at the time to confirm that 2fa was removed. That's entirely the point.