suspicious activity" this makes no sense

Question

We got an email disabling our account because of "suspicious activity" this makes no sense, we just started using the service, have done nothing wrong and were just in the mix of setting up various servers, there is virtually no activity to be unusual, praying this is a mistake and gets resolved immediately, a lot of work has gone into starting to work with Azure and we can not have lost that time and data.

Tried to submit to support, wont allow.

Tried to upgrade support, and errors out.

Any help would be appreciated.

Answer 1

I think the tenant‑risk lock is the whole stop… clean incog sign‑in → send the acct‑review, and if it still holds, wait a bit and resend from a fresh session.

Answer 2

HI Alexander

Based on my experience, this can sometimes happen when Azure detects account or subscription activity that triggers an automated security review, even if the actions were done for legitimate setup purposes. New environments, multiple deployments, subscription changes, or unusual sign-in patterns can sometimes be flagged unexpectedly.

If support submission is also failing, it becomes even more frustrating, but in cases like this, the issue usually needs to be reviewed by Microsoft directly because it is often tied to a backend security restriction.

If possible, I would suggest trying:

• submitting a support request from another browser or session
• checking whether there is a different admin account that can open the ticket
• reaching out through your CSP or reseller if applicable
• using Microsoft billing, sales, or account support channels to get the case routed properly

From what I have seen, this is usually not something that can be resolved entirely on the customer side once the account has been disabled for suspicious activity.

I hope you find this helpful

♠ ♠ Ace ♠ ♠