Microsoft Authenticator constant notifications about someone awaiting approval from me that is from USA

DavidM 0 Reputation points
2026-03-05T19:23:41.4133333+00:00

Recently I have received someone from US trying to log into my email, yet they cannot as I always deny their request however I believe they are trying to make me approve it by accident as they keep requesting it constantly throughout the day.

At first I tried to change my password but ended up with getting a request from USA regardless of changing my password.

I received another second time despite changing my password to something extremely complicated and long I still get another request so what I did is remove the password and add both verification methods. yet I still get another request despite removing the password and making my account extra secure.

I was told by Microsoft Support to change my Primary Alias to something else and after doing that someone is still requesting to login.

So how do I deal with this problem? how the hell do they know the new primary alias suddenly etc.

Microsoft Security | Microsoft Authenticator
0 comments No comments

1 answer

Sort by: Oldest
  1. AI answer

    2026-03-05T19:24:00.3766667+00:00

    The repeated Microsoft Authenticator prompts mean someone (or something automated) keeps trying to sign in with the correct username/alias, but they still cannot get in as long as every unrequested prompt is denied.

    To handle this situation:

    1. Continue denying all unrequested prompts
      • For any "Are you trying to sign in?" prompt that was not initiated, always select Deny. Without the correct response, the account remains safe.
      • This behavior is expected when someone repeatedly tries to access the account or has entered the email/phone by mistake.
    2. Review recent sign-in activity and secure the account
      • Go to the Security basics page and open Review activity.
      • On the Recent activity page, expand any sign-ins from locations/devices that are not recognized.
        • If they appear under Unusual activity, select This wasn't me.
        • If they appear under Recent activity, select Secure your account.
      • Follow the guided steps to secure the account.
    3. Change password and verify security info
      • From the Security basics page, select Change password and set a strong, unique password (not reused anywhere else).
      • Confirm that all security info (phone numbers, emails, and sign-in methods) are correct and belong only to the account owner. Remove any unknown phone numbers, emails, or devices.
    4. Understand why prompts still appear after password or alias changes
      • Unrequested prompts or codes can still appear even after changing password or alias because:
        1. Someone is trying to access the account using the correct sign-in name.
        2. Someone accidentally entered the wrong phone/email when trying to sign in.
        3. Delivery of a previously requested prompt or code is delayed.
      • Changing the primary alias does not prevent someone who already knows the original sign-in address from attempting to sign in. The system will still send prompts to the configured verification method, but the attacker cannot proceed without approval.
    5. Consider going passwordless to reduce unwanted codes
      • To reduce reliance on passwords and verification codes, enable passwordless sign-in methods such as Microsoft Authenticator, Windows Hello, SMS/Email codes, or security keys.
      • Passwordless sign-in is more secure because only the legitimate user can respond correctly on the trusted device at the right time.
      • See How to go passwordless with your Microsoft account for setup details.
    6. If verification methods are blocked or error messages appear
      • If a "Try another verification method" message or similar block appears, it may be due to unusual activity or a high volume of requests.
      • In that case:
        • Try another verification method already configured (alternate email, SMS, etc.).
        • Try signing in from a different network (switch Wi‑Fi/cellular or use another network).
        • Wait at least 24 hours without repeated attempts; blocks often clear automatically.

    The key point is that as long as all unrequested prompts are denied and the account’s security info and password are controlled only by the legitimate owner, the repeated attempts cannot succeed.


    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.