If you receive an itsme action that you did not request yourself, you should always reject that action. Do not validate anything without first checking.

Does this happen more than once? Immediately block your itsme account and contact our helpdesk.