Apple Id Code

Be default, AppleID 2 factor authentication codes are sent by encrypted iCloud notifications to your trusted devices. And they are only sent when you’re using your AppleID to login somewhere that requires 2FA to login, so your action initiates the sending of a code.

Codes are only ever sent via SMS text or automated voice message when you don’t have a trusted to receive the notification, and so you request a code be sent to your backup telephone number. Again though, your own direct actions result in the code being sent.

Apple doesn’t just send codes out of the blue. Their automated login system sends the code when you’re using your AppleID with an online Apple service that requires 2FA login.

If you weren't doing something at the time of the call that required you to have a code, it is a scam. Codes aren't sent by a phone call.