There is a reason that banks send increasingly strident text messages that they will never ask for this code.
And then undermine that effort by actually asking for that code anyway.
And then undermine that effort by actually asking for that code anyway.