I got an email this morning that someone accessed my account from Russia... which is surprising as I didn't have a Spotify account before. Not sure what the scam is here, but I was able to use the forgot password function to gain control of my new but unwitting account and change the password. I've also gone through and changed my email account password and others. Looking around, I'm not the only person this is happening to. Anyone else here know what's going on? Also can MFA be turned on with Spotify? I didn't see an option.