Hello,
Try going to https://aka.ms/mysecurityinfo and checking if there are authenticator apps set up on this profile. This could have been previously set up by the individual and forgotten (we are all human) :) ....or could be malicious, set up fraudulently.
Check and ensure only truly verified & desired methods are maintained in https://aka.ms/mysecurityinfo.
Hope this helps,