Sounds like their computers are compromised.... key loggers, malware maybe??

How are the bad actors getting the 2FA code? Are the phones hacked too? Are the phones on a rogue tower? Why is someone spending time messing with old ladies? There has to be a reason why they are a target for someone to spend this much energy.. Good luck!