A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
Based on the described behavior, the SMS verification codes are likely being blocked or delayed on Microsoft’s side rather than by the phone or carrier.
Try these steps in order:
- Avoid repeated code requests
- Stop requesting new codes for a while. Excessive or repetitive requests can cause Microsoft to temporarily block sending verification codes to that number or account.
- Check for blocks or regional issues
- Microsoft may temporarily block sending codes if there is unusual activity or heavy compromised traffic from the region. In these cases, the block usually clears automatically after some time. Waiting 24 hours (and up to several days without repeated attempts) can allow the block to expire.
- Confirm the phone number type
- Make sure the number on the account is a mobile phone number, not a VOIP number. VOIP numbers cannot be used to receive Microsoft verification codes.
- Verify the security info on the account
- Sign in to the account’s Security info page (for work/school accounts) and check that the phone number is correct and still listed as a verification method. If possible, add or switch to another method (such as an alternate email) and use that to complete sign-in or security changes.
- Try another verification method
- If the sign-in screen shows “Try another verification method,” use email or any other method already configured on the account to get through, then:
- Add a different mobile number as a new security method, or
- Set up Microsoft Authenticator as the primary method so that SMS is no longer required for sign-in or passkey setup.
- If the sign-in screen shows “Try another verification method,” use email or any other method already configured on the account to get through, then:
- Use a different network or device
- When requesting the code, try from a different browser or an InPrivate/Incognito window, and if possible from a different network (switch between Wi‑Fi and mobile data). This can help if the block is tied to a specific IP or session.
If none of the above works after waiting at least 24 hours without repeated attempts, the account may be under a stronger block and direct support assistance will be required to review and clear it.
References: