i had 17 Bitcoins disappear last December  on blockchain.info and when i reported it to there support they asked for my wallet id and password to investigate same night someone acting as myself asked for my refund giving all my details even going into my back office taking off my 2fa (code to email)   and i didn't even know he done it as i didn't receive any notification it was taken off.  long and short of the story blockchain.info through there incompetence sent my refund to completely the wrong person because he gave his new BTC address and my wallet id and password