There is a reason that banks send increasingly strident text messages that they will never ask for this code.

And then undermine that effort by actually asking for that code anyway.