MFA Error 399287

Question

I need to open a support case for MFA Error 399287 — phone number reputation block — escalate to the Data Protection Team.

I don't have access to my administrator account. Can support help me to add my phone number en reset my microsoft authenticator account?

---

Moved form: Microsoft Security | Microsoft Authenticator

Answer 1

To address MFA Error 399287, which indicates that your phone number has been blocked due to a bad reputation flag, you will need to contact Microsoft support directly. Since you do not have access to your administrator account, you can try the following steps:

1. Contact Microsoft Data Protection Support: Reach out to Microsoft’s Global Customer Service by phone. Explain your situation, including that you cannot access your administrator account and need assistance with resetting your MFA settings and adding your phone number.
2. Provide Necessary Information: When contacting support, be prepared to provide details about your account and the issue you are facing. Mention that you are the only administrator and that you need to escalate the case to the Data Protection Team.
3. Alternative Method: If you cannot reach a live agent, consider creating a temporary account (trial tenant) to submit a support ticket requesting assistance from the Data Protection Team on behalf of your original account.

These steps should help you in resolving the MFA error and regaining access to your Microsoft Authenticator account.

---

References:

• Azure has blocked my phone number for SMS verification due to a “bad reputation” flag - Microsoft Q&A
• Requesting a Tenant Admin MFA Reset - Microsoft Q&A

Answer 2

Hi @Reguilio Finsy, 
Thank you for posting your question in the Microsoft Q&A forum.          

I’m really sorry to hear about your situation.  I understand you’re having an MFA error. To assist you effectively, I’d like to clarify a few points:           

Do you have any other admin account that you can use to log in to Microsoft 365 Admin center?            

If you don't have any other admin account in this situation, the Microsoft Data Protection team has tools and processes in place to verify identity and regain access to administrator accounts.                 

Please note that forum moderators have no control over user accounts, especially when it comes to logging in to your account, resetting your password, changing your access, etc.                                   

If you are the only administrator in your organization in this situation, the Microsoft Engineering team has tools and processes in place to verify identity and regain access to administrator accounts.         

Please try to find the related hotline number to call the frontline let them raise a ticket for you: Customer service phone numbers - Microsoft Support

*(Important Note: Depending on your country or region, when you call the support number, you may hear an introduction of about 30 seconds such as "you can visit the link...". You can ignore this introduction and wait until you are presented with the options. Then press "1" as a business email user, and again "1" for technical help.)    

In some countries, this is an automated conversation: First, when you call the hotline, they will ask you what kind of problem you are struggling with.    

Answer: Authenticator.    

A: What products do you use?    

B: Office 365 for business.    

Verification: Education or company account?    

B: For companies    

A: Are you an administrator?    

B: Yes.    

A: Are there any other administrators in your organization?    

B: No.    

A: I need one.... Service request?    

B: Yes      

If your organization's Office 365 Business subscription is from a partner or reseller, and the global administrator is unable to open a service request on your end, contact the reseller's support provider to help open a service request on behalf of you instead.    

(Please try "2 or 3 times" until you can reach out to an agent.)    

Alternatively, you can try set up a new trial tenant and submit your support request:         

1. Visit the Microsoft 365 Enterprise Plans page: Go to Compare Office 365 Enterprise Pricing and Plans | Microsoft 365.         
2. Choose a plan and start a free trial: Select any of the available plans and click "Try for free" to begin the trial setup process.         
3. Follow the guided setup: Complete the steps to create a new Microsoft account and a new tenant. This will be a separate and independent Microsoft 365 environment.         
4. Access the Microsoft 365 Admin Center: Once the new tenant is created, navigate to https://admin.microsoft.com/.        
5. Go to Support: In the left-hand navigation menu, click on "Support" and then "Help & support."         
6. Raise a support ticket: Describe your issue in detail. Crucially, you must clearly state that you are locked out of a different, pre-existing Microsoft 365 tenant where you are the administrator. Provide the following information about your locked account:          
   • Your administrator account email address for the locked tenant.         
   • The domain name of your locked tenant          
   • Any error messages you are receiving.         
   • Details about the authentication issues you are experiencing.         
   • Confirmation that you are the administrator of the locked tenant.         
7. Submit your ticket: Follow the prompts to submit your support request. You will likely receive a ticket number for tracking.

When you open a support ticket, please make sure to turn off the Support Assistant (AI) in the help panel. 

Several customers have reported issues when the Support Assistant is turned on  the system sometimes fails to display the “Contact Support” option. 

As shown in the screenshot, simply switch Support Assistant → Off, then type your issue description.  Once the AI is off, the “Contact Support” button will appear normally, allowing you to submit a ticket directly. 

         

Important notes:          

• This new trial tenant will not give you access to any of the data or settings in your original locked tenant. It is solely a temporary means to contact Microsoft support.         
• Be prepared for Microsoft support to ask for verification of your identity and administrative rights for the locked tenant.         
• The resolution time might be longer as you are contacting support from a different tenant.       
• Remember to cancel the trial subscription for the new tenant once your issue with the original account is resolved to avoid any unintended charges. You can typically do this within the Microsoft 365 Admin Center under "Billing" -> "Your products."                   

Thank you again for your time and understanding. While my initial response may not resolve the issue immediately, I’d like to gather more details about your situation so I can assist you more effectively.          

I really appreciate your patience, and I’m here to help. Looking forward to your response.         

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".          

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread

Answer 3

Can i send an email instead of a phone call? I have spend too much time by phone and to get throught the automatic phone agent is giving me a hard time.