Multiple unauthorized 2FA request on Microsoft Authenticator App

Question

So I'm not the first one who reports this problem and the questions I found is solved within the community rather someone from Microsoft to address the problem itself. So try my luck here.

References: https://learn.microsoft.com/en-us/answers/questions/5725931/how-to-stop-multiple-2fa-requests-that-are-not-min, https://learn.microsoft.com/en-us/answers/questions/5703380/repeated-unauthorized-login-attempts-triggering-2f

Since couple of days I get multiple times during the day and night 2FA requests on my Microsoft Authenticator from Canada or an unknown country. What also a point is that no attempts are visible on the Acitvities page. So my guess is that they want to reset my password to trigger it.

The "solution" toward it is to create an alias and set this to the primary sign-in email and disable the current email for sign-in. This can't be the solution to this problem. Also I never enabled the passwordless authentication. So for new devices I have to provide my password. (This is why I think they try it over the password reset function)

How does Microsoft proceed with this information? I want to report the attempts in my app, but it is not possible.

P.S. I was forwarded from the Live Chat to put my question here.

P.S.S I changed already my password and sign-out on all devices

Answer 1

If you are receiving multiple unauthorized 2FA requests on your Microsoft Authenticator app, it is important to take immediate action to secure your account. Here are some steps you can consider:

1. Change Your Password: Immediately change your Microsoft account password to something strong and unique. This will help prevent unauthorized access.
2. Enable Multi-Factor Authentication (MFA): If you haven't already, enable MFA on your account. This adds an extra layer of security.
3. Review Account Activity: Regularly check your account activity for any unauthorized access. If you notice anything suspicious, report it to Microsoft.
4. Check Security Settings: Ensure that your security settings are up to date, including recovery options and security questions.
5. Contact Microsoft Support: If the issue persists, consider reaching out to Microsoft Support for assistance. They can provide guidance specific to your situation.
6. Monitor for Phishing Attempts: Be cautious of any emails or messages that request your personal information. Phishing attempts can lead to unauthorized access.

Unfortunately, there is no direct way to report unauthorized 2FA requests through the app, but keeping your account secure is the best approach.

---

References:

• Frequently asked questions about Microsoft Entra multifactor authentication
• Can't set up MFA because five devices are already registered to use an authenticator app
• Microsoft Curate - Troubleshoot Multi-Factor Authentication (MFA)
• Microsoft Invest - Troubleshoot Multi-Factor Authentication (MFA)
• Single Credential Login and Multi-Factor Authentication FAQ