Had a similar issue with a bank. Sent a few transfers (to buy bitcoin funny enough). Next thing I know everything frozen. I call the bank, they can't do anything until I speak to fraud department, where they ask me a thousand questions about myself, past transactions and the recent transactions sent to "people i had not been in contact with before".
After all that it clicked and we realized it's all because I logged on through a VPN, even if I was on a local server at the time and not connecting from across the world or whatever.
Same bank that makes me go through this didn't use 2FA at ALL until a few years ago.
Pain in the ass.