Received an update - they said it was missing the "box sleeve". I'm not sure if that's the part that slides in or the part it slides into, but the entire box was shipped. So either someone opened it in transit and only removed the sleeve, or the authenticator was smoking something.