I have been getting email bombed on my main email account.
I have no credentials like bank accounts associated with this email but still, I reset the password for it and enabled 2fa, and the same for every other email I had.
The guy who is doing this found my other email somehow is spamming them...