Admin account locked by MFA

Question

Hello,
My Microsoft 365 admin account has lost its recovery code in App Authenticator, and the recovery option using my phone number is giving me error 399287. This is my only account, and I would like the Microsoft team to contact me to assist with resetting the MFA. Thank you.

Answer 1

Hi @Bruce Doan,

Thank you for posting your question in the Microsoft Q&A forum, and I’m sorry to hear you're having trouble accessing your Admin account.

Based on your description, it appears that you are currently unable to complete multi‑factor authentication because the Microsoft Authenticator entry for your admin account may no longer be available, and the phone verification method is returning error 399287.

This error typically indicates that the phone number used for SMS or voice call MFA has been temporarily blocked by Microsoft’s Phone Reputation system. This can occur after repeated verification failures or activity that is detected as unusual. As a security measure, when this block is in place, SMS and call‑based MFA verification cannot be completed, and the prompt will continue to fail even if the credentials are correct.

• If you have only one Admin account for the tenant, I suggest the following options to move forward:

---

Option 1: Contact Microsoft Data Protection Support by phone (Please proceed with the second option if contacting phone support is not applicable to your situation)

To regain access to your admin account as you can't access the Admin Portal, you can try reaching out to Global Customer Service phone to raise a request for resetting your authentication method here: Customer service phone numbers - Microsoft Support. During the call, request to speak to an agent, and share with them every detail related to your query and also mention that you are the only admin lost access to your account. This should allow you to contact the appropriate team so you can solve this incident as soon as possible.

Please note that forum moderators do not have access to user account settings and cannot assist with logging in, resetting passwords, or changing access rights. While we do not have access to internal systems or administrative tools required to resolve account-specific or backend-related issues, we’ll continue doing our best to support you within the scope of our responsibilities.   

Here are some tips and an example of a prompt to help you navigate the IVR more effectively:      

IVR: What kind of problem are you concerned about?   

You: Authenticator.   

A: What products do you use?

B: Office 365 for business.

Verification: Education or company account?

B: For companies

A: Are you an administrator?

B: Yes.

A: Are there any other administrators in your organization?

B: No.

IVR: Do you need a... Service request?

You: Yes. I need to create a ticket. Please send me directly to the Data Protection Team.

 

---

Option 2: Create a new tenant to submit a support ticket (Alternative Method)

If you still cannot reach to a live agent, there is still a workaround, you might consider registering for a new tenant by signing up for a trial subscription via this link Microsoft 365 Business Plans and Pricing | Microsoft 365. This would allow you to create a new tenant following the prompts provided. Once set up, you can access the admin console of the new tenant and submit a support ticket requesting to speak with the Data Protection team on behalf of your previous tenant.       

It is important to note: Please remember to cancel the trial subscription once your issue is resolved to avoid any unintended charges. You may prefer the following resource for detailed instructions: Cancel your Microsoft business subscription in the Microsoft 365 admin center | Microsoft Learn.

---

• If there is another Global Administrator in the tenant, they can reset your authentication methods or require re‑registration. You can share the steps outlined in the article Manage user authentication methods for Microsoft Entra multifactor authentication. 

I hope this helps you regain access to your account quickly. Please feel free to reach out anytime if you need further assistance.

As other users will also search for information in this community, your vote can significantly help those with similar inquiries quickly locate the most relevant resources.

Thank you for your kindness and contributions to the forum.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.  

Answer 2

To regain access to your Microsoft 365 admin account after losing your recovery code in the Authenticator app and encountering error 399287 with your phone number, you can follow these steps:

1. Contact Microsoft Data Protection Support: Since you are unable to access your account, the primary method is to call Microsoft Customer Service. Make sure to explain that you are the sole administrator and need assistance with resetting your Multi-Factor Authentication (MFA). You can find the customer service phone numbers on the Microsoft support website.
2. Alternative Method: If you cannot reach a live agent, consider creating a temporary account by signing up for a trial Microsoft 365 subscription. This will allow you to access the admin console of the new tenant and submit a support ticket requesting assistance from the Data Protection team for your original account.

These methods should help you regain access to your account and reset your MFA settings.

---

References:

• Context Error Code: 399287 - Microsoft Q&A Unable to Verify Identity for Azure Login
• Context I cant log in to my business account because it is requiring Authenticator app which I do not have - Microsoft Q&A