Error code 399287

Question

Im completely locked out of my work account. It is also the global admin and only account.

To send a support request or reset mfa I need to log into this account. The authenticator isn't receiving notifications and I've tried the methods to get it to work.

While for verification I get a code sent to the email but they require a second method and which is a code or call to the phone number but that is where this error code comes from.

Can you please unblock this phone number so i an receive the code to enter this account.

Thank you.

Answer 1

Hello @Waseem Mustapha, 

I’d like to clarify that, as a forum moderator, I do not have access to user sign-in logs, nor do I have the ability to unblock your phone number, reset multi-factor authentication (MFA), revoke account access, or contact Microsoft Support on your behalf. In this context, please consider me as an end user as well, sharing guidance based on experience and publicly documented processes.

As you're the only admin, I recommend contacting the Microsoft Data Protection team, as they are the only group authorized and equipped with the necessary tools and verification procedures to confirm your identity and restore administrator access or help you with unblocking your phone number. 

Please try to find the related hotline number to call the frontline and let them raise a ticket for you: Customer service phone numbers - Microsoft Support 

Carefully follow this instruction to ask for Microsoft Data Protection team support:   

Depending on your country or region:

For some countries, when calling the support number, although there are about 30 seconds opening as something "you can visit the link...." But you can ignore this opening and wait until the option, then "1" as a business email user, "1" again for technical help.   

For some countries, it will be an automated conversation like:    

• First, when you call the hotline, it asks what kind of problem you are worried about.   
• Answered: authenticator.   
• A: What kind of product are you using?   
• B: Microsoft 365 for business.   
• A confirmation: education or company account?   
• B: For companies   
• A: Are you an administrator?   
• B: Yes.   
• A: Do you have the other admin in your organization?   
• B: No.   
• A: You need one.... Service request?   
• B: Yes   

If your subscription is from a partner or reseller, contact the reseller's support provider to help open a service request on behalf of you instead.   

If you encounter any difficulties in contacting the frontline support, please feel free to let me know. Thank you and I wish you a great day!  

---

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

Error code 399287 indicates that the phone number used for SMS verification has been flagged with a “bad reputation” and is blocked for Microsoft Entra/Microsoft 365 MFA. When this happens, only Microsoft support (Data Protection / Tenant Recovery teams) can remove the block or reset MFA; it cannot be cleared directly from the user or admin side, especially when locked out and there is only one global admin.

To regain access in this situation:

1. Contact Microsoft Data Protection / Tenant Recovery via Support
   Since sign-in to the tenant is not possible and there is no second global admin, the path is to open a support case and have it escalated to the Data Protection team so they can:
   • Reset MFA for the global admin account, and/or
   • Clear the “bad reputation”/block on the phone number used for SMS.
   Use the Microsoft global customer service phone numbers listed under Customer service phone numbers - Microsoft Support and clearly state:
   • This is a work/tenant admin account (Microsoft 365 for business / company account).
   • It is the only global admin and is fully locked out due to MFA.
   • SMS verification fails with error 399287 and the phone number has a bad reputation flag.
   • A request is needed for the Data Protection / Tenant Recovery team to reset MFA and/or remove the phone-number block.
   If the IVR is automated, answer along the lines of:
   • Product: “Office 365 for business” / “company account”
   • Role: “Administrator”
   • Another admin available: “No”
   • Need: “Create a service request; need Data Protection team; locked out due to MFA and SMS error 399287.”
2. If direct phone support is difficult to reach
   As described in similar cases, one workaround is to create a temporary trial tenant (for example, a Microsoft 365 Business trial), then from that new tenant’s admin center open a support ticket and request the Data Protection team’s help on behalf of the locked tenant. In the ticket, provide:
   • Tenant name and domain of the locked tenant.
   • Confirmation that the affected account is the only global admin.
   • Details of error 399287 and that SMS is blocked for the registered phone number.
3. Expectations
   • The Data Protection team will verify ownership and then reset MFA or clear the block so that a new MFA method can be registered or SMS can be used again.
   • This is the same path used in other reported cases where SMS had a bad reputation and global admins were locked out.

Until Microsoft support/Data Protection intervenes, the phone number block and MFA lockout cannot be removed from the self-service side.

---

References:

• Troubleshoot Microsoft verification code issues
• You don't receive a text or voice call that contains the verification code for Microsoft Entra multifactor authentication
• Common problems with two-step verification for a work or school account
• "Activation failed" error when you try to set up Azure Multi-Factor Authentication
• 399287 - Microsoft Q&A Unable to Verify Identity for Azure Login – Error 399287
• Global Admin Locked out - Microsoft Q&A
• Severity A Situation - Locked out of global admin account (MFA) - business down - Microsoft Q&A
• Requesting a Tenant Admin MFA Reset - Microsoft Q&A
• Azure has blocked myphone number for SMS verification due to a “bad reputation” flag - Microsoft Q&A