MFA Login issue due to mobile change

Question

I am the sole Global Admin of a Microsoft 365 Business account. I am completely locked out due to MFA after a phone change. I have my username and password. I need MFA disabled or reset on my account. My case number is [Moderator note: Personal information removed]

---

Moved from: Microsoft Security | Microsoft Authenticator

Answer 1

Because only one global admin exists and multifactor authentication is blocking access, the issue must be handled by Microsoft’s Data Protection team; it cannot be fixed directly without admin access.

Use these steps to regain access:

1. Contact Microsoft Data Protection / Tenant Recovery
   • Call Microsoft global customer service using the regional number listed under Customer service phone numbers - Microsoft Support.
   • When the IVR asks what the problem is, clearly state that this is an Authenticator / MFA lockout for a Microsoft 365 for business account and that there is no other global admin.
   • Ask specifically to be routed to the Microsoft 365 Data Protection team or Data Protection / Tenant Recovery and provide the tenant details and that MFA is preventing the sole global admin from signing in.
   • Have ready: admin username, tenant domain, subscription type, and the existing case number so they can locate and continue working on that case.
2. If support is hard to reach, create a temporary trial tenant to open a ticket
   • Sign up for a new Microsoft 365 trial tenant (separate from the locked tenant).
   • In the new tenant’s Microsoft 365 admin center, go to Support → Help & support and open a ticket.
   • In the ticket, clearly state that the request is for MFA reset / admin account recovery for a different tenant where the requester is the only global admin and is locked out by MFA.
   • Provide the locked-tenant admin UPN, tenant domain, and reference the existing case number so the Data Protection team can associate the requests.
3. Work with the Data Protection team
   • The Data Protection team will verify identity and ownership of the tenant (they may request documentation) and then reset MFA/strong authentication on the admin account so that sign-in can proceed and MFA can be re-registered.

Until Microsoft completes this verification and reset, MFA cannot be disabled or bypassed for the sole global admin.

---

References:

• Troubleshoot sign-in issues and account access problems
• Can't use Azure Multi-Factor Authentication to sign in to cloud services after you lose your phone or the phone number changes
• Global Admin Locked out - Microsoft Q&A
• I need to reset my mfa methods - Microsoft Q&A
• Requesting a Tenant Admin MFA Reset - Microsoft Q&A
• I have a Micrsoft business account and I am the admin and the only user registered under this account. I can't log in because i have replaced my phone and the authenticator doesn't work. - Microsoft Q&A
• Microsoft authenticator sending me into a spiral - Microsoft Q&A

Answer 2

Hello @Malik Mohammed, 

Thank you for posting your valuable question on Microsoft Q&A forum.   

---

Please understand that our forum is a public platform, and we will modify your question to cover your personal information including your case number/ticket ID in the description. Your personal data will be stored in our private messages and will automatically be deleted after 30 days.

---

Since you are the sole Global Admin of your Microsoft 365 Business tenant, only the Microsoft Data Protection team can verify your identity and help restore your administrator access. They are the dedicated team authorized and equipped with the necessary tools and procedures for this process. 

As you’ve already received a ticket number for tracking, I will help you review the ticket status to see whether there are any updates or additional instructions regarding your case. 

I’ve submitted a request to check your ticket details. As this falls outside of business hours in my region, it may take some time to receive a response. I will get back to you within 24 hours with any available information. 

In the meantime, please prepare your proof of ownership (admin account details, invoice, domain verification, etc.) in case the Data Protection team requests it. Having these documents ready will help speed up the process. 

Thank you for your patience and understanding. I will follow up as soon as I have more information. 

---

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.