I am connecting the dots now.
I heard in this thread about the Revolut web app. I went in there, gave my phone number to receive a code… and never received it. The code that I took as unsolicited came several hours later, but now I am thinking that the 2 events were linked… so that it was generated by myself.