They're asking for your password via email? whats the email address you contacted?

Can you do "view source" on the email and paste it here?

Yes they can bypass 2FA, I'm surprised they're asking for your password.