Sole Global Administrator locked out - MFA SMS blocked with Error 399287

Sasa Chang 0 Reputation points
2026-10-16T03:09:01.53+00:00

Hello,

I am the sole Global Administrator of our Microsoft Entra ID / Microsoft 365 tenant.

I am posting this question using a personal Microsoft account because I cannot access the affected business administrator account.

I can enter the correct username and password, but when I reach MFA verification, SMS verification fails with:

Error Code: 399287

SMS is currently the only available MFA method for this administrator account.

There is no other Global Administrator in the tenant who can reset or re-register the MFA authentication methods, so I am completely locked out of the Microsoft Entra Admin Center, Azure Portal, and Microsoft 365 Admin Center.

This appears to be related to the Microsoft Phone Reputation / BadReputation protection system.

Could a Microsoft moderator please advise how this can be escalated to the appropriate Microsoft support / Data Protection team for tenant recovery?

I can provide the following information through a secure or private channel if required:

  • Administrator account
  • Tenant ID
  • Tenant domain
  • Registered phone number
  • Request ID
  • Correlation ID
  • Screenshot of the error

Thank you.

Microsoft 365 and Office | Subscription, account, billing | For business | Windows
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Helen Luu 3,555 Reputation points Independent Advisor
    2026-10-16T03:49:07.32+00:00

    Hello @Sasa Chang

    The error code 399287 typically indicates that the phone number being used for SMS verification has been blocked by Azure due to a reputation-related flag. When this occurs, the phone number is prevented from being used for authentication and verification purposes, which can result in users being unable to sign in or complete multi-factor authentication (MFA) prompts.

    Since you are the only global administrator of the tenant, you will need to contact the Microsoft Support Data Protection team to remove the bad reputation flag. Please locate the appropriate Microsoft support hotline for work account and contact the frontline support team so they can raise a ticket on your behalf: Customer service phone numbers - Microsoft Support    

    Please note that this is a user-to-user support forum. Only Data Protection team can help you to revoke the session and reset your password, account, MFA...

    Data Protection Team will first verify your ownership of the account and remove the flag once confirmed.

    Here are some tips and an example of a prompt to help you navigate the IVR more effectively:  

    (While calling, you can ignore the 30-second introduction that says "you can visit the link..." and wait until you are presented with the options. Press "1" as a business email user, and again "1" for technical help.)      

    In some regions, the initial interaction may be automated, here’s a general idea of how the conversation might go to help you prepare:

    • What kind of problem are you experiencing?         
    • Answer: Authenticator         
    • What products do you use?         
    • Answer: Office 365 for business         
    • Is this for an education or company account?         
    • Answer: For companies         
    • Are you an administrator?         
    • Answer: Yes         
    • Are there any other administrators in your organization?         
    • Answer: No. I am the only admin in my tenant          
    • Do you need a... Service request?          
    • Answer: Yes. I need to create a ticket. Please send me direct to the Data Protection Teams.

    If you can't contact Microsoft Support by phone, you can try creating a new trial tenant using the link below: Microsoft 365 Business Plans and Pricing | Microsoft 365 After you fill out and submit the sign-up form, you'll have access to the Microsoft 365 admin center.

    Once you've gained access, contact the Microsoft support team by following the guidance in the following document to create a support ticket: Get support - Microsoft 365 admin | Microsoft Learn

    When submitting a support ticket, please clearly indicate that the issue involves another tenant and provide as much information as possible about that tenant, including the tenant domain, domain registration details, administrator username... Providing this information upfront will help the support team validate the tenant relationship and investigate the issue more efficiently.

    After the issue is successfully resolved, remember to cancel your trial subscription by following the instructions in the following document: Cancel your Microsoft business subscription in the Microsoft 365 admin center | Microsoft Learn

    If you have any further concern, please feel free to let me know.

    Was this answer helpful?

    0 comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.