I put in an order to transfer four domains from my current registrar to Cloudflare not long ago and gave the correct verification codes, which each gave a green tick before processing the order, but when I checked in the overview section not long ago, three of the four suggested I had used the wrong codes. I re-entered these and they changed to approval pending.
Not long ago I received four emails from the current registrar saying a transfer order had been received and giving me 5 days to cancel by clicking a link. The curious part is that it said “NameGuard received notification on Thursday, Dec 13, 2018 that you have requested a transfer to 1910 for example.com”. Presumably this is some sort of ID for Cloudflare but it’s a bit disconcerting.