You suddenly receive a message from your card app asking you to confirm a payment. How do you react?
Only authorise payments that you have initiated yourself. Always check the notifications in your card app carefully. Two-factor authentication is there to keep you safe. Report the incident to the card issuer immediately.