I am locked out of my Microsoft 365 Business tenant because the MFA verification (SMS) is not working

Question

Error Code: 399287

Request Id: [Moderator note: personal info removed]

Correlation Id: [Moderator note: personal info removed]

Timestamp: [Moderator note: personal info removed]

Answer 1

Hi @Balázs György

Welcome to Microsoft Q&A Forum.

Thank you for providing the detailed error information.

I understand that your sign‑in process is failing at the SMS‑based MFA verification step with Error Code 399287, preventing you from accessing your business account. 

This error typically indicates that the phone number used for SMS or voice call MFA has been temporarily blocked by Microsoft’s Phone Reputation system. This can occur after repeated verification failures or activity that is detected as unusual. As a security measure, when this block is in place, SMS and call‑based MFA verification cannot be completed, and the prompt will continue to fail even if the credentials are correct.

Additionally, when an account does not have an alternative MFA method already registered, administrators are unable to update or reset their own authentication information. This behavior is by design in Microsoft Entra ID to prevent unauthorized account recovery.

I acknowledge your request to unblock SMS MFA and switch to Microsoft Authenticator instead. However, the ability to register a new authentication method requires successful sign‑in using an existing MFA method or assistance from another global administrator in the tenant.

At this stage, the appropriate resolution depends on your administrative setup:

• If there is another Global Administrator in the tenant, they can reset your authentication methods or require re‑registration. You can share the steps outlined in the article Manage user authentication methods for Microsoft Entra multifactor authentication. This will allow them to help you reset your MFA settings, set up the Microsoft Authenticator app using a QR code instead of SMS and restore access to your account. 

• If you are the only administrator, account recovery will require engagement with Microsoft’s tenant recovery process, as SMS MFA blocks cannot be manually overridden by support.

Option 1: Contact Microsoft Data Protection Support by Phone (Primary Method)   

To regain access to your admin account as you can't access the Admin Portal, you can try reaching out to our Global Customer Service phone to request the removal of the bad reputation from your phone number here: Customer service phone numbers - Microsoft Support. During the call, request to speak to an agent and share with them every detail related to your query and also mention that you are the only admin who lost access to your account. This should allow you to contact the appropriate team so you can solve this incident as soon as possible.  

   

Here are some tips and an example of a prompt to help you navigate the IVR more effectively:        

In some countries, it is an automated conversation like:  

IVR: What kind of problem are you concerned about?        

You: Authenticator.        

IVR: What kind of product do you use?         

You: Office 365 for business.        

IVR confirmation: education or company account?        

You: For companies        

IVR: Are you an administrator?        

You: Yes.        

IVR: Do you have another administrator in your organization?        

You: No.        

IVR: Do you need a... Service request?

You: Yes. I need to create a ticket. Please send me directly to the Data Protection Team.

Option 2: Create a Temporary Account (Trial Tenant) to Submit a Support Ticket (Alternative Method)  

If you still cannot reach to a live agent, there is still a workaround, you might consider registering for a new tenant by signing up for a trial subscription via this link Microsoft 365 Business Plans and Pricing | Microsoft 365. This would allow you to create a new tenant following the prompts provided. Once set up, you can access the admin console of the new tenant and submit a support ticket requesting to speak with the Data Protection team on behalf of your previous tenant.       

Please remember to cancel the trial subscription once your issue is resolved to avoid any unintended charges.     

 

Please note that forum moderators do not have access to user account settings and cannot assist with logging in, resetting passwords, or changing access rights. While we do not have access to internal systems or administrative tools required to resolve account-specific or backend-related issues, but we’ll continue doing our best to support you within the scope of our responsibilities.    

I hope this helps you regain access to your account quickly. I'm glad to assist and truly hope the information provided has been useful. Please feel free to reach out anytime if you need further assistance.   

If you find my post helpful, kindly consider marking it as the accepted answer. Doing so can assist others in the community who may have similar questions in finding solutions more quickly.   

---

Note: Follow the steps in our documentation to enable email notifications if you want to receive email notifications related to this topic.