I get a few 2FA notifications from Canada daily using my hotmail.com ... how to stop?

Question

I changed my password to a more complex one to no avail...
Then i went passwordless as MS Support recommended that.

There was an option to sign out of all devices. I tried that.
What else is there to do? i still get these 2FA popups on my phone that are coming from "Canada on Windows". I live in the US so i know these are hackers.

Note: the "Recent activity" page (https://account.live.com/Activity?mkt=en-US&refd=account.microsoft.com&refp=security) never lists failure logins it seems as i never see the Canada requests in there. i only see my successful logins from the US there.

Thanks!

Answer 1

To expand on the suggestion from @Jeronimo Fuerte to disable logins for your current email.

Login Only Alias

You create a new "secret" alias that only you know. You use it ONLY to logon to your account. Then you remove the Sign-In privilege from your existing email alias so it can not be used to logon to your account but can still be used to send and receive email. Now, if all the Bad Guys have is your old alias, they get "This username has been turned-off for sign in" at the very first step of the logon process and can not continue.

 1 -- Create a new Log In Only (LIO) alias.
https://account.live.com/AddAssocId
e.g. "JohnDoe.LIO@..."
Write it down! If you forget your LIO alias you will be locked out!

 2 -- Make the LIO alias your Primary Alias.
https://account.live.com/names/manage
Do NOT "Remove" anything!

 3 -- Log out of your account.
Click on your Initials/Profile Picture at the top right and choose "Sign out"

 4 -- Verify that you can login using the new LIO alias.
https://login.live.com/

 5 -- Uncheck the Sign-in privilege from your old alias.
https://account.live.com/SignInPreferences
It's now an Email Only (EMO) alias.

 6 -- Log out of your account.
Click on your Initials/Profile Picture at the top right and choose "Sign out"

 7 -- Verify that you can NOT login using your old EMO alias.
https://login.live.com/
You should see "This username has been turned-off for sign in"

 8 -- Change your default "Send From" in Outlook to your EMO alias.
https://outlook.live.com/mail/options/mail/forwarding
-> Email aliases -> Set default From address

 References:

https://support.microsoft.com/en-us/office/add-or-remove-an-email-alias-in-outlook-com-459b1989-356d-40fa-a689-8f285b13f1f2

https://www.outlook-tips.net/tips/keeping-hackers-microsoft-accounts/

Answer 2

Hi! Sorry to hear about this. Additionally, you can try changing the sign-in alias for your Microsoft account. You can manage which aliases are allowed to sign in here: https://account.live.com/SignInPreferences

If you don’t currently have another alias available, you can add a new one here: https://account.live.com/names/manage

I recommend not deleting your current alias, just add the new one and set it as the preferred sign-in. This can help improve account security, especially if your email address has been exposed publicly.