Share via

I'm getting notifications that someone wants to sign in to my Outlook using the Authenticator

Bob Ligget 0 Reputation points
2026-06-18T22:53:11.57+00:00

Someone or some bot is trying to access my Outlook email and I'm getting notifications via Authenticator to choose the correct number for access or deny it. I'm denying it, of course, but these requests are coming multiple times a day. How do I prevent them from even getting this far?

Microsoft Security | Microsoft Authenticator
0 comments No comments

3 answers

Sort by: Most helpful
  1. Julie Huynh 1,530 Reputation points Independent Advisor
    2026-06-19T08:27:51.5566667+00:00

    Dear @Bob Ligget,

    Good day! Welcome to Microsoft Q&A forum!

    Based on your description, I understand that you are receiving multiple Microsoft Authenticator notifications prompting you to approve sign-in attempts to your Outlook account. These requests are happening several times a day, and although you are correctly denying them, you’re concerned about how to stop these attempts from occurring altogether.

    To make sure I understand your situation accurately, could you please confirm:

    • Are you currently able to access your account without any issues?
    • Are you using a personal Microsoft account (e.g., @outlook.com / @hotmail.com) or a work/school account (e.g., @yourcompany.com)?
    • Are the alerts coming through the Microsoft Authenticator app, email, or both?

    Your confirmation would be very helpful in ensuring you receive the most suitable support!

    Based on what you described, receiving repeated unauthorized sign-in attempts can definitely feel alarming.

    In most cases, this happens when your email address becomes exposed online, this can occur through past data breaches, leaks from websites you’ve signed up for, or even public listings where your email is visible. Once an email address is out there, it often gets picked up and circulated in large databases that are traded or shared across the internet.

    That’s why you may suddenly see repeated sign-in alerts or 2FA prompts even though nothing has happened to your account directly.

    The good news is that your two-factor authentication (2FA) is doing its job and by denying these requests, you’re actively preventing access.

    Furthermore, depending on your account type:

    1-If you are using a Personal account: You may want to try the alias sign-in method (highly recommended):

    2-If you are using a Business account: I recommend contacting your IT administrator within your organization.

    They can:

    Kindly let me know when there are updates or if you need further assistance. Any updates you’re able to share would be really helpful. I appreciate your time and look forward to hearing how things are going! 

    Thank you for your time and patience.


    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".  

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    Was this answer helpful?

    0 comments No comments

  2. kagiyama yutaka 3,685 Reputation points
    2026-06-18T23:14:00.24+00:00

    I think MS allows changing the account password and removing any sign‑in methods you do not use and these two actions are the ones that stop the request before it can move forward.

    Was this answer helpful?

    0 comments No comments

  3. AI answer

    2026-06-18T22:53:28.8933333+00:00

    Select Deny on every prompt that was not initiated and keep doing so; without approval, the account remains safe.

    To reduce or stop these prompts:

    1. Review recent activity
      • Go to the account’s recent activity page: https://account.live.com/Activity.
      • Look for sign-in attempts that are not recognized.
      • For any unfamiliar events, select Secure your account and follow the steps to change the password and review security info.
    2. Ensure security info is up to date
      • Confirm that alternate email addresses and phone numbers are correct and belong only to the account owner.
      • Remove any methods that are not recognized.
    3. Use strong security hygiene
      • Use a strong, unique password for the Microsoft account.
      • Do not share verification codes or approve prompts that were not initiated.
    4. If using Outlook mobile or Authenticator Lite
      • If Outlook mobile is being used as a sign-in method, verify that Allow sign-in requests is enabled only on trusted devices. If a device is no longer trusted, disable sign-in requests for that account on that device.

    Even if someone or a bot keeps trying to sign in, they cannot get access without the correct password and an approved prompt or valid verification code.


    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.