A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
Those push notifications are typically triggered because someone is repeatedly trying to sign in with the account name, not because they have successfully accessed the account. Microsoft states that if an unauthorized sign-in attempt is made using the email or username, the sign-in flow can send a prompt to Microsoft Authenticator.
If the Recent activity page shows nothing suspicious, that can still fit this pattern: repeated sign-in attempts may be generating prompts without showing confirmed account access in the visible recent activity history.
Recommended actions:
- Do not approve any unrequested prompt or code. If a verification code or sign-in prompt was not requested, do not respond to it.
- Review account activity again at the Security basics page and select Review activity. If any entry appears that was not initiated by the account owner, select This wasn't me for unusual activity or Secure your account for recent activity.
- Change the password again if compromise is still suspected from the Security basics page, and make sure it is strong and unique.
- Update security info on the Security basics page so recovery and verification methods are current.
- For a personal Microsoft account, add a new sign-in alias and disable sign-in on the old alias. This is the most relevant mitigation in cases where attackers keep targeting the known sign-in name. The old address can remain for email use, but disabling it for sign-in helps stop repeated Authenticator prompts tied to that old login name.
- If access problems or Authenticator issues continue, use Microsoft Support through Contact Support. Microsoft also notes that support agents cannot send password reset links or directly change account details.
If the account becomes inaccessible, use Forgot my password on the sign-in page and choose I think someone else is using my Microsoft account.
References:
- What happens if there's an unusual sign-in to your account | Microsoft Support
- Check the recent sign-in activity for your Microsoft account
- Troubleshoot verification code issues for work or school accounts | Microsoft Support
- How to help keep your Microsoft account secure | Microsoft Support
- Someone is trying to get into my account - Microsoft Q&A I keep getting Authenticator notifications that I am not initiating. What should I do?
- People keep trying to hack me - Microsoft Q&A My microsoft authentication app keeps sending me notifications that someone in another country is trying to log into my account and i keep having to click deny in stead of one of the 3 numbers. Is there any way to stop this? Thx ❤️