Receiving Authentication Alerts

Question

I have been receiving authentication requests from my Microsoft Authenticator Application that are not coming from me. Is this someone trying to login into my account? If, they’re NOT gaining entry, should I worry about it?

Answer 1

Yes. Unrequested prompts in Microsoft Authenticator usually mean:

1. Someone is trying to sign in to the account using the correct username and password and is now being blocked by the second factor, or
2. Someone mistyped their email/phone and entered this account by mistake, or
3. A previously requested prompt is being delivered late.

If these prompts are not initiated by the account owner, they must always be denied:

• Select Deny on every sign-in request that was not started by the account owner.
• Do not approve any request that is not expected; without approval, the attacker cannot complete sign-in and the account remains safe.

Because repeated unexpected prompts can indicate an active attempt to break into the account, the account’s security should be reviewed and strengthened (for example, by checking sign-in activity and updating security methods) and any suspicious prompts should continue to be denied.

---

References:

• Using Outlook mobile to sign in
• Common problems with two-step verification for a work or school account